Book Physical Therapy

Book physical-therapy services through Lokuli MCP. Use when user needs to find and book physical-therapy. Triggers on requests like "book a physical-therapy", "find physical-therapy near me", or any physical-therapy service request.

Security Scan

The skill's requests and instructions are consistent with booking physical-therapy via Lokuli's MCP, but it omits authentication and privacy details (so expect user PII to be transmitted and verify the endpoint before use).

Purpose & Capability

Name/description match the instructions: SKILL.md shows JSON-RPC/SSE calls to a Lokuli MCP endpoint and example calls for searching, checking availability, and creating a booking — all coherent with booking physical-therapy.

Instruction Scope

Instructions stay within booking scope (search, check_availability, create_booking). They do not instruct reading unrelated files or system state. However, the doc provides example customer fields (name/email/phone) but does not specify how to collect user consent or whether to redact/store data; it also omits authentication steps for the MCP endpoint.

Install Mechanism

No install spec and no code files — instruction-only skill (lowest install risk). Nothing is downloaded or written to disk.

Credentials

The skill declares no environment variables or credentials, which is plausible for an instruction-only wrapper that delegates calls to platform tools. That said, the create_booking examples will transmit personal data (name, email, phone) to https://lokuli.com; the SKILL.md does not document authentication requirements or justify the lack of credentials, so it's unclear how the service is authenticated and how PII/privacy are handled.

Persistence & Privilege

always is false and the skill does not request elevated or persistent platform privileges or modify other skills/config. Default autonomous invocation is allowed (platform normal) but not combined with other concerning factors.

Assessment

This skill appears to do what it says (search and book via Lokuli), but before installing or using it you should: 1) Verify the endpoint (https://lokuli.com) is legitimate and that you trust that service. 2) Understand that bookings will include PII (name, email, phone) sent to that external endpoint — confirm how that data is authenticated, stored, and protected. 3) Ask the agent to request explicit user consent before sending personal data or test with dummy data first. 4) If you require stronger assurance, ask the publisher for authentication details (API key / OAuth) or for a privacy policy; the SKILL.md currently omits these. If you cannot verify those items, treat this as higher-risk and avoid sending real personal information.

uook physical therapy

Book physical-therapy services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "physical-therapy",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}