Book Tires

Book tires services through Lokuli MCP. Use when user needs to find and book tires. Triggers on requests like "book a tires", "find tires near me", or any tires service request.

Security Scan

The skill's instructions and required resources are coherent with its stated purpose (searching and booking tire services via Lokuli's MCP); it requests no credentials or installs, but it will send booking details to an external endpoint (lokuli.com) and leaves how to collect user PII/location unspecified.

Purpose & Capability

Name/description match the SKILL.md: the document provides JSON-RPC templates for searching, checking availability, and creating bookings against Lokuli's MCP endpoint. There are no unrelated binaries, env vars, or config paths requested.

Instruction Scope

Instructions are narrowly scoped to calling Lokuli's MCP (search, check_availability, create_booking). They do not instruct reading local files or unrelated env vars. However, the SKILL.md includes example PII (customerName, email, phone) and a hard-coded zipCode/date in templates; it does not specify how to obtain user consent or the user's real zip/location, so an agent may end up transmitting personal data without explicit guidance.

Install Mechanism

No install spec and no code files — instruction-only. Low risk from installation because nothing is written to disk or downloaded.

Credentials

The skill requests no environment variables or credentials (proportionate). But creating bookings requires personal data (name, email, phone, location) that will be sent to an external domain (https://lokuli.com). The SKILL.md does not document data handling, consent, or what information is required from the user.

Persistence & Privilege

always is false and the skill is user-invocable; it does not request persistent privileges or modify other skills. Autonomous invocation is allowed by default but not escalated here.

Assessment

This skill appears to do what it says, but it will contact an external service (lokuli.com) to create bookings and may transmit personal data (name, email, phone, location). Before installing or using it: verify you trust lokuli.com and the skill's publisher (unknown here); confirm how your location and contact info will be obtained and shared; avoid providing credentials or unnecessary PII; ask the agent to show the exact request it will send and get your explicit approval before creating a booking. Because the skill is instruction-only and has no code to inspect, if you need stronger assurance ask the publisher for a privacy/security statement or prefer booking via a known website or app.

uook tires

Book tires services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "tires",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}