Book Yoga

Book yoga services through Lokuli MCP. Use when user needs to find and book yoga. Triggers on requests like "book a yoga", "find yoga near me", or any yoga service request.

Security Scan

The skill's requirements and instructions are consistent with a simple booking helper that queries a remote booking MCP and creates bookings; nothing requested is disproportionate to that purpose.

Purpose & Capability

The name/description (book yoga via Lokuli MCP) aligns with the instructions: the SKILL.md defines search, check_availability, and create_booking JSON-RPC calls to an MCP endpoint. No unrelated binaries, env vars, or config paths are requested.

Instruction Scope

Instructions are narrowly scoped to calling the Lokuli MCP (https://lokuli.com/mcp/sse) with JSON-RPC messages. The create_booking call includes personal contact fields (name, email, phone) — appropriate for booking but it means the skill will transmit PII to the external endpoint. The SKILL.md does not instruct reading local files or other system state.

Install Mechanism

No install spec or code is present (instruction-only), so nothing is written to disk and no third-party packages are fetched.

Credentials

No environment variables or credentials are required, which is consistent but also means there is no declared authentication for the MCP endpoint. That could be legitimate (public endpoint or platform-mediated auth) but merits verification before sending real user data.

Persistence & Privilege

always is false and the skill does not request persistent system presence or modify other skills; autonomous invocation is allowed by default (normal) but not elevated here.

Assessment

This skill appears to do what it says: call Lokuli's MCP to search and create yoga bookings. Before installing or using it, verify Lokuli (lokuli.com) is a service you trust, since booking requires sharing personal contact info (name, email, phone) with that external endpoint. Confirm how the MCP authenticates/authorizes requests (the SKILL.md declares no required API key), avoid sending payment or highly sensitive data through the skill until you confirm storage/retention policies, and prefer providing contact details interactively rather than embedding secrets in any automation. If you need stronger assurance, ask the skill author for documentation on authentication and data handling.

uook yoga

Book yoga services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "yoga",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[e-mail]",
      "customerPhone": "[phone]"
    }
  }
}