Book Physical Therapy

PassAudited by ClawScan on May 10, 2026.

Overview

This is a straightforward booking skill, but it can contact an external MCP service and create a real physical-therapy appointment using the user’s contact details.

This skill appears coherent and purpose-aligned. Before using it, make sure you want your physical-therapy search or booking details sent to Lokuli, and require final confirmation before any appointment is created.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could schedule an appointment with the supplied provider, time, and contact details if the user directs it to proceed.

Why it was flagged

The skill can create a real booking and submit user contact information. This is purpose-aligned, but it is a high-impact action that should be user-confirmed.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }
Recommendation

Confirm the provider, service, date/time, price or insurance details if available, and contact information before allowing the booking call.

What this means

Using the skill may disclose physical-therapy search and booking details to Lokuli and the relevant provider.

Why it was flagged

The skill instructs use of a remote MCP endpoint. The booking workflow may send health-service context, ZIP code, name, email, and phone number to that external service.

Skill content
MCP Endpoint: https://lokuli.com/mcp/sse ... Transport: SSE | JSON-RPC 2.0 | POST requests
Recommendation

Use only if you are comfortable sharing the necessary booking details with Lokuli; avoid providing more personal information than needed.

What this means

Users have limited artifact-level information about the publisher or the external service beyond the MCP endpoint shown in the instructions.

Why it was flagged

The skill is instruction-only and has no local code to inspect, but the source and homepage are not provided while the skill depends on an external MCP service.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing only if you trust the publisher or have independently verified Lokuli’s service and privacy practices.