Book Phone Repair

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is coherent for booking phone repair, but it uses an external Lokuli MCP service that may receive contact details and create a real appointment.

Before installing or using it, be comfortable sharing your ZIP code and contact details with Lokuli, and make sure the agent confirms the provider, time, and contact information before creating a booking.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could schedule an appointment if the user proceeds with booking details.

Why it was flagged

The skill exposes a tool that can create an actual service booking. This is expected for the stated purpose, but it is a user-impacting action.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"
Recommendation

Confirm provider, service, time slot, and contact details with the user before calling create_booking.

What this means

Your ZIP code and contact information may be sent to Lokuli or its booking providers when searching or booking.

Why it was flagged

The skill uses a remote MCP endpoint and its booking example sends customer contact details to that service. This is disclosed and purpose-aligned, but it involves personal data leaving the agent session.

Skill content
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only provide contact details when ready to book, and review the external service’s privacy practices if needed.

What this means

Users have limited artifact-level information for independently verifying the publisher or service implementation.

Why it was flagged

The artifacts do not provide a source repository or homepage for independent provenance review, while the skill relies on a remote MCP service.

Skill content
Source: unknown; Homepage: none
Recommendation

Use the skill only if you trust the registry entry and the Lokuli service endpoint.