Book Pilates
ReviewAudited by ClawScan on May 10, 2026.
Overview
This pilates-booking skill is coherent, but it can make real bookings and send your contact details to an external MCP service without explicit confirmation guardrails.
Review this skill before installing. It appears purpose-aligned for finding and booking pilates, but you should require explicit confirmation before any booking is created and provide personal contact details only if you trust the external Lokuli MCP service.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill could create an appointment and share your contact information before you have clearly approved the exact booking details.
The skill exposes a state-changing booking operation with personal contact details, but the instructions do not add an explicit user-confirmation or review step before the booking is created.
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }Only use the booking action after the user explicitly confirms the provider, service, date/time, contact details, price, and cancellation/no-show terms.
Your name, email address, phone number, and chosen appointment details may be sent to Lokuli's MCP service to complete a booking.
The skill routes booking requests through an external MCP endpoint and includes fields for personal contact information. This is expected for booking, but it is still a sensitive data flow.
MCP Endpoint: https://lokuli.com/mcp/sse ... "customerName", "customerEmail", "customerPhone"
Share only the information required to book and verify that you trust the Lokuli service before providing personal contact details.