Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Lokuli Booking

v0.1.0

Book real-world services through Lokuli MCP. Use when user needs to find, check availability, or book local services like plumbers, electricians, cleaners, mechanics, barbers, personal trainers, etc. Triggers on requests like "book me a haircut", "find a plumber near me", "I need a smog check", "schedule a massage", or any local service request. 75+ service categories available.

0· 1.2k·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (book local services) match the SKILL.md: search, fetch, check availability, create bookings, and return Stripe checkout URLs for payment. The declared capabilities align with the stated purpose.
Instruction Scope
Instructions are narrowly scoped to searching providers, fetching details, checking availability, and creating bookings. They explicitly require collecting user name, email, phone, and optionally ZIP from context — which is appropriate for booking but does involve personal data. No instructions ask the agent to read unrelated files or system secrets.
Install Mechanism
Instruction-only skill with no install spec or code files — minimal surface area and no disk writes. This is the lowest-risk install pattern.
Credentials
The SKILL.md talks to Lokuli's MCP endpoint and generates Stripe checkout links but the skill declares no required environment variables or credentials. That can be fine if the platform provides the necessary tool integrations/auth; otherwise it is an ambiguity to resolve. The personal data requested for bookings (name, email, phone, ZIP) is proportionate to the task but worth noting from a privacy perspective.
Persistence & Privilege
Skill does not request always:true and does not declare any persistent system modifications. Model invocation is allowed (platform default), which is expected for a user-invokable booking skill.
Assessment
This skill appears to do what it says (find providers, check availability, create bookings and hand you a Stripe checkout link). Before installing: 1) Note the package has no homepage and an unknown source/owner — verify Lokuli's legitimacy outside this registry if possible. 2) Confirm how the platform will authenticate to lokuli.com and whether any hidden credentials are required (SKILL.md declares none). 3) Expect the skill to ask for personal info (name, email, phone, ZIP) to make bookings; only provide contact details you’re comfortable sharing. 4) Payment happens via a Stripe checkout URL — you will complete payment off the agent; never paste card numbers into chat. 5) If you need stronger assurance, ask the publisher for a homepage or integration docs that explain authentication, data handling, and retention.

Like a lobster shell, security has layers — review code before you run it.

latestvk975519ahkdwde34xsqszpnkdn80k080
1.2kdownloads
0stars
1versions
Updated 19h ago
v0.1.0
MIT-0

Lokuli Service Booking

Book real services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

Find services by query and location.

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "smog check",
      "zipCode": "90640",
      "category": "Auto Services",
      "maxResults": 20
    }
  }
}
  • query (required): What to search for
  • zipCode: ZIP code to search near
  • category: One of: Auto Services, Music & Audio, Beauty Services, Health & Wellness, Tattoo & Body Art, Tech Repair, Tutoring & Education, Home Services, Photography & Video, Events
  • maxResults: 1-50, default 20

fetch

Get detailed provider info.

{
  "method": "tools/call",
  "params": {
    "name": "fetch",
    "arguments": {
      "id": "provider_id_from_search"
    }
  }
}

check_availability

Get available time slots.

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

Book and get Stripe payment link.

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "john@example.com",
      "customerPhone": "+13105551234"
    }
  }
}

Returns Stripe checkout URL for payment.

get_booking

Check booking status.

{
  "method": "tools/call",
  "params": {
    "name": "get_booking",
    "arguments": {
      "bookingId": "stripe_session_id"
    }
  }
}

get_service_catalog

List all 75+ service types.

{
  "method": "tools/call",
  "params": {
    "name": "get_service_catalog",
    "arguments": {
      "category": "All"
    }
  }
}

get_pricing_estimates

Get typical pricing for a service.

{
  "method": "tools/call",
  "params": {
    "name": "get_pricing_estimates",
    "arguments": {
      "serviceType": "smog check"
    }
  }
}

validate_location

Check if ZIP code is serviceable.

{
  "method": "tools/call",
  "params": {
    "name": "validate_location",
    "arguments": {
      "zipCode": "90640"
    }
  }
}

create_cart

Create AP2 cart with JWT-signed mandate (alternative to direct checkout).

{
  "method": "tools/call",
  "params": {
    "name": "create_cart",
    "arguments": {
      "shopId": "provider_id",
      "services": [
        {"sku": "service_id", "name": "Smog Check", "price": 39.99, "quantity": 1}
      ]
    }
  }
}

Categories

  • Auto Services: Smog Check, Oil Change, Detailing, Mechanic, Tires
  • Music & Audio: Recording Studios, Music Lessons, DJ Services
  • Beauty Services: Barber, Hair Salon, Nails, Makeup
  • Health & Wellness: Massage, Chiropractor, Personal Training
  • Tattoo & Body Art: Tattoo, Piercing
  • Tech Repair: Phone Repair, Computer Repair
  • Tutoring & Education: Tutoring, Test Prep, Language
  • Home Services: Plumber, Electrician, HVAC, Cleaning
  • Photography & Video: Photography, Videography
  • Events: Catering, Event Planning

Workflow

  1. Understand — What service? Where (ZIP)?
  2. Search — Find matching providers
  3. Present — Show top results with pricing
  4. Fetch — Get details on selected provider
  5. Check availability — Get open time slots
  6. Confirm — Get explicit user approval
  7. Create booking — Generate Stripe checkout
  8. Share link — User completes payment

Rules

  • Never book without confirmation — Always get explicit approval
  • Show pricing upfront — Use get_pricing_estimates if needed
  • Collect required info — Name, email, phone before booking
  • Default to user's ZIP — If known from context

Comments

Loading comments...