Book Garage Door
v1.0.1Book garage-door services through Lokuli MCP. Use when user needs to find and book garage-door. Triggers on requests like "book a garage-door", "find garage-door near me", or any garage-door service request.
⭐ 1· 1.3k·0 current·0 all-time
byLokuli@edwardrodriguez703-design
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill claims to search and create bookings via Lokuli MCP and the SKILL.md shows JSON-RPC calls for search/check_availability/create_booking — that aligns with the stated purpose. However the instructions use a hard-coded zipCode (90640) and example customer data rather than describing how to use the actual user's location and identity, which conflicts with the described trigger phrases like 'near me'.
Instruction Scope
The SKILL.md instructs the agent to communicate with an external MCP endpoint (https://lokuli.com/mcp/sse) and to invoke tools named 'search', 'check_availability', and 'create_booking'. It does not explain authentication/authorization for that endpoint, does not declare that these tools will exist or how they are provided, and contains hard-coded example arguments. These omissions create scope/operational gaps and could lead the agent to send user data to an external service without necessary safeguards or clarity.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk and there is no installer risk.
Credentials
The skill declares no required environment variables or credentials, yet the instructions expect communication with an external service. That raises two possibilities: either the platform provides the needed authentication implicitly (not documented), or the skill omits required credentials. The lack of declared auth requirements is a clarity/privilege concern.
Persistence & Privilege
The skill does not request permanent presence (always: false) and uses normal agent invocation. It does not attempt to modify other skills or system-wide settings.
What to consider before installing
This skill likely does what it claims (search and book via Lokuli), but it has several gaps you should resolve before installing: 1) Ask who operates the 'lokuli.com' MCP endpoint and verify it's a legitimate provider. 2) Confirm how authentication is handled — the SKILL.md omits any token/API key or required environment variables; do not assume the platform will supply credentials. 3) Ask the skill author to remove hard-coded example values (zipCode 90640, example name/email/phone) and to explicitly instruct using the user's location and contact details only after consent. 4) Verify the platform's tools ('search', 'check_availability', 'create_booking') exist and what data they will send to the remote endpoint. 5) Until these are clarified, avoid using with real personal data; test with dummy data and monitor network calls or logs. If the author cannot explain the authentication model and data flows, treat this skill as high risk.Like a lobster shell, security has layers — review code before you run it.
latestvk976t0hb7d54a2qwswyfywpxp980ndvw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.