Book Window Cleaning

PassAudited by ClawScan on May 10, 2026.

Overview

This is a simple instruction-only booking skill that uses a disclosed Lokuli MCP endpoint; users should confirm before creating a booking and sharing contact details.

This skill appears coherent and low risk for its purpose. Before installing or using it, make sure you are comfortable sending booking details to Lokuli and always confirm the final appointment details before the agent creates a booking.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could create a window-cleaning appointment if the user proceeds with booking details.

Why it was flagged

The skill exposes a booking action that can create a real appointment. This is aligned with the stated purpose, but it is a side-effecting action that should be user-confirmed.

Skill content
"name": "create_booking"
Recommendation

Confirm the provider, service, date, time, and contact details before allowing the booking call.

What this means

Your name, email, phone number, ZIP code, and booking preferences may be shared with Lokuli or the selected service provider.

Why it was flagged

The skill uses a third-party MCP endpoint and the booking example includes customer contact information. This is expected for booking services but means personal data is sent to the provider.

Skill content
https://lokuli.com/mcp/sse ... "customerName": "John Doe", "customerEmail": "john@example.com", "customerPhone": "+13105551234"
Recommendation

Only provide the contact details needed for the booking and avoid sharing unrelated personal information.