Lokuli Booking
v1.0.1Book real-world services through Lokuli MCP. Use when user needs to find, check availability, or book local services like plumbers, electricians, cleaners, mechanics, barbers, personal trainers, etc. Triggers on requests like "book me a haircut", "find a plumber near me", "I need a smog check", "schedule a massage", or any local service request. 75+ service categories available.
⭐ 1· 1.3k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description map directly to the SKILL.md tooling (search, fetch, check_availability, create_booking, etc.). There are no unrelated binaries or environment variables requested; the workflow (search → availability → create booking → Stripe checkout) is consistent with a booking service.
Instruction Scope
All runtime instructions are limited to JSON-RPC calls to the specified MCP endpoint and the documented tool names. However the skill explicitly requires transmitting customer PII (name, email, phone) and location (ZIP) to the external endpoint and will return Stripe checkout URLs; the document also says to default to the user's ZIP from context, which could cause the agent to use contextual location data. The SKILL.md does not instruct reading local files or system secrets.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written to disk by the skill itself, so install risk is low.
Credentials
No environment variables or credentials are declared. That is reasonable if the platform provides authenticated tool calls, but it's an omission to verify: contacting an external MCP typically requires authentication. The absence of declared credentials is not inherently malicious but you should confirm how the agent authenticates to lokuli.com and whether any secrets are expected to be supplied elsewhere.
Persistence & Privilege
The skill does not request 'always: true' and does not ask to persist or modify other skills' configs. It is user-invocable and can run autonomously per platform defaults; autonomous invocation plus outbound network access means it could make external calls when selected, which is expected behavior for a booking integration.
Assessment
Before installing: 1) Verify lokuli.com is the legitimate provider (ask for vendor docs, privacy policy, and a homepage or company contact). 2) Understand privacy: the skill will send PII (name, email, phone, ZIP) to an external endpoint and produce Stripe checkout links — do not provide sensitive payment data in the chat. 3) Confirm how authentication is handled (platform-managed vs. you must supply keys); avoid entering secrets unless you trust the vendor. 4) Test with dummy data first and require explicit user confirmation before creating bookings or sharing contact info. 5) If you need stronger assurance, request the publisher/homepage or prefer a skill from a known provider.Like a lobster shell, security has layers — review code before you run it.
bookingvk971t7ty198npzjh4h3cv4ed1s80j0vqlatestvk97f2jjhy1eew434vrpfqv2az180kbgflocalvk971t7ty198npzjh4h3cv4ed1s80j0vqmcpvk971t7ty198npzjh4h3cv4ed1s80j0vqservicesvk971t7ty198npzjh4h3cv4ed1s80j0vq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.