Book Pool Service
v1.0.1Book pool-service services through Lokuli MCP. Use when user needs to find and book pool-service. Triggers on requests like "book a pool-service", "find pool-service near me", or any pool-service service request.
1· 1,314·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's instructions generally match a booking-purpose, but it omits authentication details and user-confirmation steps and contains a few ambiguous examples that could lead to unintended bookings or data disclosure to an external MCP endpoint.
评估建议
This skill is instruction-only and appears to do what it says (search, check availability, create bookings via Lokuli's MCP), but you should: 1) confirm how calls to https://lokuli.com/mcp/sse are authenticated — does the platform provide credentials or is the endpoint public? 2) require the skill to always ask for and receive explicit confirmation from the user (name, email, phone, date/time, provider) before invoking create_booking to avoid accidental bookings or data leaks, and 3) verify Loku...详细分析 ▾
ℹ 用途与能力
Name/description (book pool service via Lokuli MCP) align with the SKILL.md which shows search, check_availability, and create_booking RPC calls to Lokuli's MCP. However, the skill declares no credentials or auth requirements while referencing an external MCP endpoint (https://lokuli.com/mcp/sse), which is unusual for a service that performs bookings and may require authentication.
⚠ 指令范围
SKILL.md provides JSON-RPC 'tools/call' payloads for search, check_availability, and create_booking but is underspecified about workflow and safeguards: it uses hardcoded example arguments (zipCode, dates, customer data), doesn't instruct the agent to always ask the user to confirm booking details before calling create_booking, and does not address what user data is sent to Lokuli. That gives the agent broad discretion which could lead to unintended bookings or leaking personal data.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing is written to disk by the skill itself.
ℹ 凭证需求
The skill requires no environment variables or credentials in metadata, which is plausible if RPC calls are routed through the platform's tools. However, the absence of declared auth for an external booking endpoint is noteworthy and should be clarified (does the platform handle authentication, or is the MCP open?).
✓ 持久化与权限
always is false and there are no config-path or persistence requests. The skill can be invoked autonomously (platform default), which is acceptable but combined with the instruction vagueness above could enable autonomous bookings — users should verify confirmation behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/6
Fixed display name
● 无害
安装命令 点击复制
官方npx clawhub@latest install book-pool-service
镜像加速npx clawhub@latest install book-pool-service --registry https://cn.clawhub-mirror.com
技能文档
Book pool-service services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "pool-service",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "john@example.com",
"customerPhone": "+13105551234"
}
}
}
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制