Book Tree Service
v1.0.1Book tree-service services through Lokuli MCP. Use when user needs to find and book tree-service. Triggers on requests like "book a tree-service", "find tree-service near me", or any tree-service service request.
1· 1,325·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's instructions are broadly consistent with a tree-service booking helper, but missing provenance and authentication details make it unclear whether it will behave as claimed or where user data would go.
评估建议
This skill appears to implement a booking workflow but lacks provenance and any authentication details. Before installing or using it: 1) Verify the Lokuli domain and the skill author (is lokuli.com legitimate and related to the developer?). 2) Ask how the agent will authenticate to the MCP (API key/OAuth) — do not let it send real PII until you confirm an auth/token mechanism and a privacy policy. 3) Confirm where providerId/serviceId values come from and that the agent will ask you for explici...详细分析 ▾
ℹ 用途与能力
Name and description match the instructions: SKILL.md contains JSON-RPC calls (search, check_availability, create_booking) to an external MCP endpoint (https://lokuli.com/mcp/sse) which is coherent with a booking workflow. However, the skill lists no owner/homepage/source and supplies example provider/service IDs and customer data but no mechanism for obtaining providerId/serviceId or authenticating to Lokuli. For a real booking integration, some form of credentials or onboarding info is normally required; their absence is notable.
⚠ 指令范围
Instructions include concrete JSON-RPC payloads and an external endpoint but do not describe authentication, rate-limiting, error handling, or how to obtain/replace example data (zip code, providerId, customer fields). There are no instructions requiring explicit user consent before sending personal data; in practice an agent following this could attempt to send a user's PII to an external service without safeguards.
✓ 安装机制
Instruction-only skill with no install spec and no code files — low risk from local code execution or disk persistence. Nothing is downloaded or written during install because there is no install mechanism.
ℹ 凭证需求
The skill requests no environment variables or credentials, which reduces immediate risk. At the same time, a booking integration typically requires authentication (API key, OAuth token, or similar); the absence of any declared credential is unexpected and leaves unclear how the MCP endpoint expects requests to be authorized.
✓ 持久化与权限
always:false and no special config paths or install behavior. The skill is user-invocable and can be called autonomously by the agent (platform default), which is expected for useful skills. There is no request to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/6
Fixed display name
● 无害
安装命令 点击复制
官方npx clawhub@latest install book-tree-service
镜像加速npx clawhub@latest install book-tree-service --registry https://cn.clawhub-mirror.com
技能文档
Book tree-service services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "tree-service",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "john@example.com",
"customerPhone": "+13105551234"
}
}
}
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制