📦 Book Tires — 预订轮胎
v1.0.1通过 Lokuli MCP 查找并预订轮胎服务，支持“预订轮胎”“附近轮胎”等自然语言请求。
1· 1.4k·0 当前·0 累计
by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
medium confidenceThe skill's instructions and required resources are coherent with its stated purpose (searching and booking tire services via Lokuli's MCP); it requests no credentials or installs, but it will send booking details to an external endpoint (lokuli.com) and leaves how to collect user PII/location unspecified.
评估建议
This skill appears to do what it says, but it will contact an external service (lokuli.com) to create bookings and may transmit personal data (name, email, phone, location). Before installing or using it: verify you trust lokuli.com and the skill's publisher (unknown here); confirm how your location and contact info will be obtained and shared; avoid providing credentials or unnecessary PII; ask the agent to show the exact request it will send and get your explicit approval before creating a boo...详细分析 ▾
✓ 用途与能力
Name/description match the SKILL.md: the document provides JSON-RPC templates for searching, checking availability, and creating bookings against Lokuli's MCP endpoint. There are no unrelated binaries, env vars, or config paths requested.
ℹ 指令范围
Instructions are narrowly scoped to calling Lokuli's MCP (search, check_availability, create_booking). They do not instruct reading local files or unrelated env vars. However, the SKILL.md includes example PII (customerName, email, phone) and a hard-coded zipCode/date in templates; it does not specify how to obtain user consent or the user's real zip/location, so an agent may end up transmitting personal data without explicit guidance.
✓ 安装机制
No install spec and no code files — instruction-only. Low risk from installation because nothing is written to disk or downloaded.
ℹ 凭证需求
The skill requests no environment variables or credentials (proportionate). But creating bookings requires personal data (name, email, phone, location) that will be sent to an external domain (https://lokuli.com). The SKILL.md does not document data handling, consent, or what information is required from the user.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request persistent privileges or modify other skills. Autonomous invocation is allowed by default but not escalated here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/6
Fixed display name
● 无害
安装命令
点击复制官方npx clawhub@latest install book-tires
镜像加速npx clawhub@latest install book-tires --registry https://cn.longxiaskill.com