Book Waxing
v1.0.1Book waxing services through Lokuli MCP. Use when user needs to find and book waxing. Triggers on requests like "book a waxing", "find waxing near me", or any waxing service request.
⭐ 1· 1.3k·0 current·0 all-time
byLokuli@edwardrodriguez703-design
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description align with the SKILL.md: it targets Lokuli's MCP and defines search, availability check, and booking RPC calls. The required capabilities (network calls to Lokuli) are consistent with the stated purpose.
Instruction Scope
Instructions contain JSON-RPC examples that include customerName, customerEmail, and customerPhone fields; this is expected for a booking skill but means the agent will collect/transmit PII. Examples include hard-coded sample values (zipCode 90640, dates in 2025) which should be replaced with user-supplied data; the instructions do not tell the agent to read unrelated files or secrets.
Install Mechanism
Instruction-only skill with no install steps, no code files, and no binaries to install — minimal filesystem/installation risk.
Credentials
No environment variables or credentials are requested (proportionate). However, the skill will send user-provided PII to https://lokuli.com/mcp/sse; absence of declared auth means requests may be unauthenticated or rely on platform tooling — the external endpoint and data transmission are the main privacy consideration.
Persistence & Privilege
Default privileges (always: false, agent-invocable allowed). The skill does not request permanent presence or elevated privileges.
Assessment
This skill appears to do what it says: call Lokuli's MCP to search and create waxing bookings. Before installing or using it, consider: (1) the skill will send personal data (name, email, phone, location/time) to https://lokuli.com — only proceed if you trust that domain and service; (2) the SKILL.md contains example/hard-coded values — ensure the agent asks you for your actual zip code, date/time, and contact details before sending; (3) there is no source or homepage listed, so if you need higher assurance, verify the endpoint (lokuli.com) independently or test with dummy contact info first; (4) if you do not want your contact info transmitted automatically, refuse or require a confirm step in the agent flow.Like a lobster shell, security has layers — review code before you run it.
latestvk976tksf00ckfqe9m9ph82gqq980m89a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.