Book Wedding

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for wedding booking, but it can create real service bookings and send contact details to an external MCP endpoint without documented confirmation or cancellation safeguards.

Use this skill only if you are comfortable sharing contact details with Lokuli and connected wedding-service providers. Before any booking is created, confirm the exact provider, service, date/time, price or deposit, cancellation terms, and the contact information to be sent.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could create an unwanted booking or send a user's contact details before the user has clearly approved the exact provider, time, and terms.

Why it was flagged

The skill exposes a booking mutation using customer contact information, but the provided instructions do not include safeguards such as explicit final user confirmation, price/terms review, or cancellation guidance.

Skill content
"name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234" }
Recommendation

Only allow create_booking after the user explicitly confirms the provider, service, date/time, contact details, price or deposit if any, and cancellation policy.

What this means

A user's name, email, phone number, and booking preferences may be transmitted to Lokuli or its connected service providers.

Why it was flagged

The skill clearly uses an external MCP endpoint and sends personal contact data as part of booking, which is purpose-aligned but should be visible to users.

Skill content
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Tell the user before sending personal data, send only the minimum needed, and verify that the endpoint and provider privacy practices are acceptable.

What this means

Users have less independent information for confirming who operates the booking integration and what terms or privacy practices apply.

Why it was flagged

There is no source repository or homepage to help verify the publisher or the remote MCP integration, though no local code or install script is present.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the publisher and Lokuli MCP endpoint through a trusted channel before relying on the skill for real bookings.