ClawHub

蘭(Lann)泰式按摩预约技能

v1.0.4

提供蘭泰式按摩（Lann Thai Massage）的门店查询、SPA服务查询和在线预约功能。支持泰式古法按摩、精油护理、草本热敷等专业服务预约，覆盖上海、杭州、成都等多城市门店。

⭐ 0· 99·0 current·0 all-time
by@lystrosaurus
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (store/service query + booking) align with the included data files (org_store.json, prod_service.json), API endpoint, and test scripts. No unrelated credentials, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md and README instruct reading local JSON data for store/service lookup and calling a documented booking API. The runtime steps reference only the included files and the API endpoint; there are no instructions to read arbitrary system files or exfiltrate data.
✓
Install Mechanism
No install spec is declared (instruction-only skill). Provided helper scripts reference installing/starting a separate 'lann-mcp-server' project but do not download arbitrary executables from unknown shorteners or IPs. The scripts assume user action to obtain the MCP server.
✓
Credentials
The skill declares no required environment variables or credentials. The scripts expose a configurable API_ENDPOINT (defaulting to https://open.lannlife.com/mcp/book/create), which is appropriate for a booking integration. No broad secrets or unrelated service keys are requested.
✓
Persistence & Privilege
The skill does not request persistent privileges or force inclusion (always:false). Its files and scripts do not attempt to modify other skills or system-wide agent settings.
Assessment
This package appears coherent for a booking skill. Before installing or running scripts: 1) Verify you trust the API host (https://open.lannlife.com) since test scripts/post requests contact it; 2) avoid running the install branch of start_mcp.sh unless you obtain lann-mcp-server from a trusted source; 3) when running tests, do not use real personal phone numbers if you don't want them sent to the remote API; and 4) if you require stronger guarantees, request the upstream repository URL or contact the publisher to confirm the official service endpoints and privacy practices.

Like a lobster shell, security has layers — review code before you run it.

latestvk9707r7hwq7kmd6a0g87yn8fss84j1hq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💆 Clawdis

Comments