← Back to Skills Marketplace
edwardrodriguez703-design

Book Car Wash

by Lokuli · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1392
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install book-car-wash
Description
Book car-wash services through Lokuli MCP. Use when user needs to find and book car-wash. Triggers on requests like "book a car-wash", "find car-wash near me", or any car-wash service request.
README (SKILL.md)

uook car wash

Book car-wash services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "car-wash",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}
Usage Guidance
This skill appears to try to book car washes by calling an external service (lokuli.com) and will send customer details (name, email, phone) and likely location. Before installing or using it: (1) verify the skill author and a trustworthy homepage/privacy policy for Lokuli; (2) confirm how the service is authenticated (API key, OAuth) — the skill does not declare any credentials; (3) ensure you consent to sending any personal data to that external domain; (4) if you want to test, run it in a sandbox and avoid providing real PII until you confirm the endpoint and security; and (5) ask the skill author to clarify the auth, consent, and how the zipCode/location is obtained. If you can't verify those points, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill Name: book-car-wash Version: 1.0.1 The skill bundle defines a 'book-car-wash' service that interacts with a specific external endpoint `https://lokuli.com/mcp/sse` to perform search, availability checks, and booking actions. All defined tools and their arguments (`search`, `check_availability`, `create_booking`) are directly aligned with the stated purpose of booking car-wash services. There is no evidence of prompt injection with malicious intent, data exfiltration beyond necessary booking details, malicious execution, persistence mechanisms, or obfuscation in the `_meta.json` or `SKILL.md` files.
Capability Assessment
Purpose & Capability
The name/description (book car-wash via Lokuli MCP) align with the runtime instructions: SKILL.md provides JSON-RPC calls for search, check_availability, and create_booking against an MCP endpoint. However, the skill does not declare any authentication mechanism or explain how API access is authorized, which is unusual for a remote booking API and reduces confidence in the claimed capability.
Instruction Scope
Instructions explicitly direct the agent to call an external endpoint (https://lokuli.com/mcp/sse) and to send booking payloads that include customerName, customerEmail, and customerPhone. That is consistent with booking functionality, but the instructions do not: (1) state how to obtain/require user consent for sending PII, (2) specify authentication or headers, (3) explain how location/zipCode is determined (SKILL.md uses a hardcoded zip 90640), and (4) reconcile 'SSE' transport with JSON-RPC POST examples (ambiguous). These gaps increase the risk of unintended data disclosure.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing is written to disk by the skill package itself.
Credentials
The skill declares no required environment variables or credentials, yet it targets an external API endpoint. Real-world booking APIs typically require an API key or similar credential; the absence of any declared auth is suspicious (either the skill relies on platform-provided tooling not documented here, or it would make unauthenticated requests). The instructions also enable transmission of PII (name, email, phone) and potentially location data — this is proportional to booking functionally but should be explicitly documented and justified.
Persistence & Privilege
always is false and there is no requested persistent system modification. The skill does not ask to modify other skills or global agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install book-car-wash
  3. After installation, invoke the skill by name or use /book-car-wash
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fixed display name
v1.0.0
Initial release
Metadata
Slug book-car-wash
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Book Car Wash?

Book car-wash services through Lokuli MCP. Use when user needs to find and book car-wash. Triggers on requests like "book a car-wash", "find car-wash near me", or any car-wash service request. It is an AI Agent Skill for Claude Code / OpenClaw, with 1392 downloads so far.

How do I install Book Car Wash?

Run "/install book-car-wash" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Book Car Wash free?

Yes, Book Car Wash is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Book Car Wash support?

Book Car Wash is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Book Car Wash?

It is built and maintained by Lokuli (@edwardrodriguez703-design); the current version is v1.0.1.

💬 Comments