Book Plumber

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill matches its plumber-booking purpose, but it can create a real booking and send contact details to a remote MCP service without explicit final-confirmation guidance.

Review this skill before installing. It appears purpose-aligned for booking plumbers, but you should make sure your agent asks for clear final approval before creating any booking or sharing your contact details with Lokuli.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Concern

ASI02: Tool Misuse and Exploitation

What this means

An agent could book an appointment or share contact information before the user has clearly confirmed the exact provider, time, and terms.

Why it was flagged

This tool can create a third-party service booking using the user's contact details, but the artifact does not include safeguards requiring final user approval before the booking is made.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }

Recommendation

Require an explicit final confirmation step before create_booking, including provider, service, date/time, contact details, estimated cost, and cancellation policy.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Using the skill may transmit personal contact details to Lokuli or its plumbing-service providers.

Why it was flagged

The skill discloses a remote MCP endpoint and shows customer contact information being sent as booking arguments.

Skill content

https://lokuli.com/mcp/sse ... "customerEmail": "john@example.com", "customerPhone": "+13105551234"

Recommendation

Only provide the minimum contact information needed, and use the booking action only after the user agrees to share those details with the service.