Book Towing

Book towing services through Lokuli MCP. Use when user needs to find and book towing. Triggers on requests like "book a towing", "find towing near me", or any towing service request.

Security Scan

The skill's instructions match its stated purpose (finding/booking towing via Lokuli MCP) but are incomplete and omit provenance, authentication, and explicit user-confirmation steps—these gaps could cause accidental data exposure or unintended bookings.

Purpose & Capability

Name/description, MCP endpoint (lokuli.com/mcp/sse), and the JSON-RPC 'search'/'check_availability'/'create_booking' examples are coherent with a towing-booking integration. However the package has no homepage/source details and does not declare any credential or auth requirement for the external MCP endpoint, which is unexpected for a third‑party booking API.

Instruction Scope

SKILL.md only contains example JSON-RPC payloads and a target endpoint; it uses hard-coded example values (zip code 90640, 'John Doe', [e-mail], phone) and lacks runtime instructions to prompt the user for location, contact details, payment info, or explicit confirmation before creating bookings. This increases risk of accidental or misattributed bookings and unintended transmission of user data to an external service.

Install Mechanism

Instruction-only skill with no install spec and no code files — lowest installation risk (nothing written to disk).

Credentials

Skill declares no required environment variables or credentials. In practice an external MCP/booking API commonly requires authentication; the absence of declared credentials or guidance on auth is a mismatch that may indicate the SKILL.md is incomplete or assumes external configuration not described.

Persistence & Privilege

No 'always: true' set (good). Model invocation is not disabled, so the agent could autonomously call these booking actions — because the instructions lack explicit confirmation steps, autonomous invocation could lead to unwanted bookings. Consider requiring explicit user consent before create_booking calls.

What to consider before installing

Before installing or enabling this skill: 1) Verify the skill's provenance — there is no homepage and the source is unknown. 2) Confirm whether Lokuli's MCP endpoint requires API keys or other credentials; the SKILL.md does not declare any auth, which is unusual. 3) Ensure the skill will prompt you for location, contact details, and explicit confirmation before calling create_booking (avoid hard-coded placeholders). 4) Prefer to disable autonomous model invocation or require user confirmation for any booking action. 5) Test in a safe/sandbox environment (no real payments or live bookings) until you can confirm behavior and privacy practices.

uook towing

Book towing services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "towing",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}