Book Window Cleaning

Book window-cleaning services through Lokuli MCP. Use when user needs to find and book window-cleaning. Triggers on requests like "book a window-cleaning", "find window-cleaning near me", or any window-cleaning service request.

Security Scan

The skill's requests and runtime instructions are coherent with its stated purpose (booking window-cleaning via Lokuli's MCP), but there is limited external context (no source/homepage) and some missing detail about authentication and user-data handling that you should verify before using it with real personal info.

Purpose & Capability

Name/description say "book window-cleaning via Lokuli MCP" and the SKILL.md contains JSON-RPC examples for search, check_availability, and create_booking against an MCP endpoint (lokuli.com). The required inputs (zip code, providerId, serviceId, customer contact) match the booking purpose and there are no unrelated credentials or binaries requested.

Instruction Scope

Instructions stay within booking flow (search → check_availability → create_booking). However SKILL.md embeds an explicit external MCP endpoint (https://lokuli.com/mcp/sse) and contains example hard-coded personal data (name, email, phone), which could be copied accidentally. The skill does not describe consent/confirmation steps, nor does it explain which user data will be sent to that external endpoint.

Install Mechanism

Instruction-only skill with no install spec and no code files — lowest-risk delivery mechanism. Nothing is written to disk by the skill itself.

Credentials

The skill declares no required environment variables or credentials. That is plausible if the hosting platform provides authenticated tool calls; however, because the SKILL.md references an external MCP endpoint, it is unclear how authentication/authorization to that endpoint is handled. No unrelated secrets are requested.

Persistence & Privilege

Defaults are used (not always:true). The skill does not request persistent or elevated platform-wide privileges and does not modify other skills or system configuration in the instructions.

Assessment

This skill appears coherent with its stated purpose, but before installing or using it with real personal data you should: 1) Verify the legitimacy of lokuli.com (owner, privacy policy, and whether the MCP endpoint is official). 2) Ask how authentication is handled — why the SKILL.md doesn't declare any API key/credential and whether the platform will supply secure auth. 3) Confirm the agent will ask for explicit user confirmation before sending any personal data (name, email, phone, payment info) to the external endpoint. 4) Test the skill with dummy data first. 5) If possible, request source code or a homepage from the author to increase confidence. If you cannot validate the endpoint or auth, avoid sending sensitive information through this skill.

uook window cleaning

Book window-cleaning services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "window-cleaning",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}