Book Test Prep

ReviewAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for finding and booking test-prep services, but it uses an external MCP service and can create a booking with the user's contact details.

Before installing or using it, make sure you trust Lokuli for test-prep booking, provide only necessary contact details, and require the agent to ask for explicit confirmation before creating a booking.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The agent could place a real booking if the workflow proceeds to this tool.

Why it was flagged

The skill exposes a tool that can create an external booking, which is purpose-aligned but should be used only after the user confirms the booking details.

Skill content

"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00"

Recommendation

Confirm the provider, service, time slot, and user's intent immediately before creating any booking.

Medium

#ASI07: Insecure Inter-Agent Communication

What this means

The user's name, email, and phone number may be shared with Lokuli or the selected test-prep provider.

Why it was flagged

The skill uses an external MCP endpoint and includes customer contact details in the booking call, so user information may be sent to the service provider as part of booking.

Skill content

https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"

Recommendation

Share only the contact information needed for the booking and verify that the user is comfortable sending it to the external service.