Book Pool Service

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for booking pool services, but it can create real bookings and send contact details to an external MCP service without clear final-confirmation guidance.

Before installing, be aware that this skill can help search and book pool-service appointments through Lokuli. Only approve a booking after checking the provider, date, time, price, cancellation terms, and contact details that will be submitted.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent using this skill could potentially place a service booking or submit contact details before the user has clearly approved the exact provider, time, and terms.

Why it was flagged

This tool can create an actual third-party service booking using the user's contact information, but the skill does not include instructions to obtain explicit final confirmation or present booking details, costs, or cancellation terms before calling it.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }
Recommendation

Add a mandatory confirmation step before create_booking, showing the provider, service, time slot, price if available, cancellation policy, and the contact details that will be sent.

What this means

The user's name, email, phone number, and booking preferences may leave the local agent environment and be shared with the booking service.

Why it was flagged

The skill discloses an external MCP endpoint and the booking example includes personal contact fields, so user-provided contact data may be sent to Lokuli or downstream providers as part of the booking flow.

Skill content
MCP Endpoint: https://lokuli.com/mcp/sse ... "customerName", "customerEmail", "customerPhone"
Recommendation

Users should only provide contact details they are comfortable sharing, and the skill should document the destination, privacy expectations, and any downstream provider sharing.