Book Photographer

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill matches its booking purpose, but it can create a real photographer booking and send contact details to an external MCP service without documented confirmation safeguards.

Before installing or using this skill, verify the Lokuli endpoint and make sure the agent asks for explicit confirmation before creating any booking. Do not provide contact details unless you are comfortable sharing them with the external booking service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent could potentially create an unwanted appointment or submit incorrect contact details if it acts before the user has clearly approved the final booking.

Why it was flagged

The skill exposes a booking action that can create a real-world service appointment using user contact details, but the instructions do not include an explicit user-confirmation or reversal requirement before making the booking.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }
Recommendation

Only use the booking action after confirming the exact provider, service, date/time, contact information, price or fees, and cancellation policy with the user.

What this means

Your name, email address, and phone number may be shared with the external booking provider.

Why it was flagged

The skill discloses that it uses an external Lokuli MCP endpoint and may send customer contact information there as part of the booking workflow.

Skill content
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Share only the contact details needed for the booking, and verify that the user is comfortable sending them to Lokuli before calling create_booking.

What this means

Users have less information to verify who operates the service before trusting it with booking requests and contact details.

Why it was flagged

The skill depends on a remote booking service, but the provided metadata does not include a source repository or homepage for independent verification.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the Lokuli service and endpoint out-of-band before relying on it for real bookings or personal information.