← Back to Skills Marketplace
1408
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install book-locksmith
Description
Book locksmith services through Lokuli MCP. Use when user needs to find and book locksmith. Triggers on requests like "book a locksmith", "find locksmith near me", or any locksmith service request.
README (SKILL.md)
uook locksmith
Book locksmith services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "locksmith",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "[email protected]",
"customerPhone": "+13105551234"
}
}
}
Usage Guidance
This skill appears to do what it says (book locksmiths) but is incomplete and potentially risky in practice. Before installing or enabling it, ask the publisher or maintainer: (1) How is authentication to https://lokuli.com/mcp/sse handled? Where would an API key or token be stored? (2) Will the agent always prompt you to confirm address, zip code, date/time, and your contact details before creating a booking? (3) Is there a sandbox or dry-run mode to test behavior without placing real bookings or charges? (4) Does lokuli.com have a privacy/security policy you can review? If you proceed, require the skill to explicitly prompt for and confirm all personal info and to surface any costs/charges before creating bookings. Because the SKILL.md uses hardcoded ZIP and sample PII and provides no auth details, treat it as untrusted until these questions are answered.
Capability Analysis
Type: OpenClaw Skill
Name: book-locksmith
Version: 1.0.1
The skill is suspicious due to the hardcoded customer details ('John Doe', '[email protected]', '+13105551234') within the `create_booking` tool definition in `SKILL.md`. While the external network call to `https://lokuli.com/mcp/sse` is expected for a booking service, the use of fixed personal information as default arguments poses a significant risk of unintended data submission or privacy issues if the agent uses these values without proper user input or confirmation.
Capability Assessment
Purpose & Capability
The skill claims to book locksmiths via Lokuli's MCP endpoint, which is consistent with the name/description. However, the SKILL.md references an external API (https://lokuli.com/mcp/sse) but declares no credentials or auth mechanism. Booking services normally require authenticated API access and confirmation of customer details; the absence of any declared auth or explanation is a mismatch.
Instruction Scope
Instructions show JSON-RPC payloads for search, check_availability, and create_booking and would transmit personal data (customerName, customerEmail, customerPhone). The SKILL.md provides hardcoded example values (zipCode 90640, sample customer info) and gives no guidance to prompt the user for consent/verification, or to validate/location-match before placing a booking. It does not instruct reading unrelated system files or env vars, which is good, but it also lacks necessary runtime steps (auth, user confirmation, explicit input collection).
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write code to disk or pull external packages. That minimizes install-time risk.
Credentials
The registry metadata lists no required environment variables or primary credential, yet the SKILL.md expects the agent to call an external MCP endpoint. If the endpoint requires an API key/session token, that credential is missing from the declared requirements. Additionally, the skill will handle user PII for bookings but provides no declared requirement or guidance for securely obtaining/storing that data.
Persistence & Privilege
The skill is not always-enabled (always: false), is user-invocable, and does not request system or other skills' configuration. It does not request persistent presence or elevated privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install book-locksmith - After installation, invoke the skill by name or use
/book-locksmith - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fixed display name
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Book Locksmith?
Book locksmith services through Lokuli MCP. Use when user needs to find and book locksmith. Triggers on requests like "book a locksmith", "find locksmith near me", or any locksmith service request. It is an AI Agent Skill for Claude Code / OpenClaw, with 1408 downloads so far.
How do I install Book Locksmith?
Run "/install book-locksmith" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Book Locksmith free?
Yes, Book Locksmith is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Book Locksmith support?
Book Locksmith is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Book Locksmith?
It is built and maintained by Lokuli (@edwardrodriguez703-design); the current version is v1.0.1.
More Skills