Book Venue
v1.0.1Book venue services through Lokuli MCP. Use when user needs to find and book venue. Triggers on requests like "book a venue", "find venue near me", or any venue service request.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and SKILL.md all describe booking venue services via Lokuli MCP. The example JSON-RPC tool calls (search, check_availability, create_booking) are directly relevant to the stated purpose and there are no unrelated binaries, env vars, or config paths declared.
Instruction Scope
Instructions are narrowly scoped to calling the Lokuli MCP endpoint with booking-related payloads. However, those calls will transmit personal customer data (name, email, phone, time slot) to an external service (https://lokuli.com/mcp/sse). This data exfiltration is expected for a booking skill but is important for the user to know and approve.
Install Mechanism
No install spec and no code files are present (instruction-only), so nothing is written to disk or pulled from third-party URLs during install — lowest install risk.
Credentials
The skill declares no required environment variables or credentials. That is internally consistent but notable: the SKILL.md references an external MCP endpoint but does not document authentication or API keys. Either the platform provides auth transparently, or the skill omits necessary auth details; the absence of credential requirements should be confirmed before use.
Persistence & Privilege
always is false (no forced inclusion) and the skill does not request any elevated or persistent system-wide privileges or configuration changes.
Assessment
This skill appears coherent for booking venues via Lokuli, but before installing you should: (1) confirm the publisher/trustworthiness (source/homepage is missing), (2) verify how authentication to Lokuli is handled (the SKILL.md lists an endpoint but no API key or auth instructions), and (3) be aware that using the skill will send personal customer info (name, email, phone, time/date) to https://lokuli.com. If you have privacy concerns, test with dummy data first, review Lokuli's privacy/terms, and ask the platform how credentials (if any) are managed. If you need higher assurance, request the publisher to provide an official homepage or documentation for the MCP integration.Like a lobster shell, security has layers — review code before you run it.
latest
uook venue
Book venue services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "venue",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "john@example.com",
"customerPhone": "+13105551234"
}
}
}
Comments
Loading comments...
