Book Piercing

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherent for finding and booking piercings, but users should review before letting it send contact details to Lokuli or create an appointment.

Before installing or using this skill, verify that you trust Lokuli and the listed MCP endpoint. Use it for search and availability normally, but require a final confirmation before creating any booking and avoid sharing unnecessary personal information.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used without final review, the agent could book an appointment with the wrong provider, time, or contact information.

Why it was flagged

The skill documents a tool that can create an external booking using the user's chosen time and contact details.

Skill content
"name": "create_booking", ... "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only allow create_booking after confirming the exact provider, service, time slot, and contact details with the user.

What this means

Personal booking information such as name, email, phone number, ZIP code, and appointment preferences may be shared with Lokuli or providers.

Why it was flagged

The skill relies on an external MCP endpoint, and the documented booking flow includes customer contact details sent through that service boundary.

Skill content
https://lokuli.com/mcp/sse ... Transport: SSE | JSON-RPC 2.0 | POST requests
Recommendation

Verify the Lokuli endpoint is trusted and share only the information needed to search availability or complete the booking.

What this means

Users have less independent context for verifying who maintains the skill or the external service it points to.

Why it was flagged

The package has limited provenance information, although it contains only SKILL.md and no executable code.

Skill content
Source: unknown; Homepage: none
Recommendation

Confirm that the Lokuli service and skill publisher are trusted before relying on the booking workflow.