Book Tailor

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: book-tailor Version: 1.0.1 The skill is classified as suspicious due to its handling and transmission of Personally Identifiable Information (PII) such as customer name, email, and phone number via the `create_booking` tool, and its reliance on external network calls to `https://lokuli.com/mcp/sse` as defined in `SKILL.md`. While these capabilities are plausibly needed for the stated purpose of booking tailor services, they represent meaningful high-risk behaviors without clear evidence of intentional malicious activity, fitting the criteria for a suspicious classification.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A booking could be created with a chosen tailor, time slot, and contact information.

Why it was flagged

The skill documents a tool capable of creating a real service booking, which is aligned with the stated purpose but is a user-impacting action.

Skill content
"name": "create_booking"
Recommendation

Confirm the provider, service, time, customer contact details, price, and cancellation policy with the user before creating a booking.

What this means

The user's name, email, phone number, and appointment details may be shared with Lokuli and/or the selected service provider.

Why it was flagged

The skill routes MCP requests to an external Lokuli endpoint, including booking fields such as customerName, customerEmail, and customerPhone.

Skill content
https://lokuli.com/mcp/sse
Recommendation

Only provide necessary contact information and use the booking action when the user has agreed to share those details with the service.