Book Transmission

PassAudited by ClawScan on May 10, 2026.

Overview

The skill is purpose-aligned and has no local code, but it relies on an external Lokuli MCP service that can receive contact details and create a booking.

This skill appears coherent for finding and booking transmission services. Before using it, make sure you are comfortable sharing contact details with Lokuli/the provider, and confirm all booking details before allowing a booking to be created.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used with wrong details, it could create an unwanted appointment or send incorrect contact information to a service provider.

Why it was flagged

The skill documents a tool that can create a real booking with customer contact details. This is aligned with the stated purpose, but it is an externally mutating action that should be confirmed by the user.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }
Recommendation

Confirm the selected provider, service, time slot, customer name, email, phone number, and any cost or cancellation terms before invoking create_booking.

What this means

Using the skill may share ZIP code, appointment preferences, name, email, and phone number with Lokuli or downstream booking providers.

Why it was flagged

The skill uses a remote MCP endpoint and the booking example includes personal contact data. This data sharing is expected for booking, but users should understand the external data boundary.

Skill content
https://lokuli.com/mcp/sse ... "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Use only information needed for the booking and review Lokuli/provider privacy expectations before sharing personal contact details.

What this means

Users have less context for verifying who maintains the skill or the referenced service.

Why it was flagged

The provided metadata does not identify a source repository or homepage, leaving limited provenance for the remote MCP integration.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify that lokuli.com is the intended provider before relying on the skill for real bookings.