ClawHub

Local Booking

v1.0.0

Book real-world services through Lokuli MCP. Use when user needs to find, check availability, or book local services like plumbers, electricians, cleaners, mechanics, barbers, personal trainers, etc. Triggers on requests like "book me a haircut", "find a plumber near me", "I need a smog check", "schedule a massage", or any local service request. 75+ service categories available.

⭐ 1· 1.3k·1 current·1 all-time
byLokuli@edwardrodriguez703-design
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the SKILL.md: the skill describes finding providers, checking availability, and generating bookings (Stripe checkout). It does not request unrelated binaries, system files, or credentials.
ℹ
Instruction Scope
Instructions stay focused on searching, fetching provider details, checking availability, and creating bookings. Two points are ambiguous: (1) the SKILL.md references an MCP endpoint and tool calls but does not describe authentication or how the agent authenticates to Lokuli; (2) it says 'Default to user's ZIP — If known from context' which grants the agent broad discretion to use any available user context/profile unless explicitly constrained. Both are plausible but should be clarified.
✓
Install Mechanism
Instruction-only skill with no install steps or code files — minimal disk footprint and no third-party installs.
ℹ
Credentials
The skill requests no environment variables or credentials, which is proportionate. However, the docs mention Stripe checkout URLs and a 'JWT-signed mandate' for create_cart without stating where keys or signing occur. This is not necessarily malicious (signing/auth may be handled by the platform), but you should confirm which component holds signing keys and Stripe credentials.
✓
Persistence & Privilege
Skill is not always-enabled and uses default agent invocation. It does not request system-wide configuration changes or other skills' credentials.
Assessment
This skill appears to do what it says: search providers, show pricing/availability, and create bookings with a Stripe checkout link. Before installing: (1) confirm how the agent/platform authenticates to lokuli.com (the SKILL.md references an MCP endpoint but gives no auth details); (2) confirm where JWT signing and Stripe credentials live (platform vs. skill) so you aren't unknowingly exposing keys; (3) be aware the skill will collect personal data (name, email, phone) to create bookings—decide whether you want the agent to auto-fill this from user context; (4) verify the lokuli.com domain and its privacy/payment policies and, if possible, test in a sandbox account first. If you need stronger guarantees, request the skill author to document authentication flows and data-handling explicitly.

Like a lobster shell, security has layers — review code before you run it.

latestvk976mhtrxkwf3st97gkem9yb4s80nd4t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments