Book massage services through Lokuli MCP. Use when user needs to find and book massage. Triggers on requests like "book a massage", "find massage near me", or any massage service request.

This skill appears to perform legitimate booking actions, but it omits important operational details. Before installing or enabling it, consider: 1) Verify the external endpoint (https://lokuli.com) and confirm it's the intended service — check its privacy policy and legitimacy. 2) Ask the skill author how authentication is handled (API key, OAuth, or anonymous access). If authentication is required, ensure keys/tokens aren’t left in plain text. 3) Be cautious about providing user PII (name, email, phone). The skill gives no guidance on explicit user consent or data minimization — require explicit consent before sending any personal data. 4) Test in a safe environment (no real credit-card or personal data) to observe actual network calls. 5) If you need stronger assurances (encryption, audit logging, revocation), request those from the publisher or avoid using the skill. Additional information about authentication and the service's privacy/security practices would move this assessment toward benign.

Type: OpenClaw Skill Name: book-massage Version: 1.0.1 The skill 'book-massage' is designed to facilitate booking massage services through the `lokuli.com` endpoint. The `SKILL.md` file clearly defines three tools (`search`, `check_availability`, `create_booking`) with parameters appropriate for their stated functions, including handling necessary PII (name, email, phone) for booking. There is no evidence of malicious execution, unauthorized data exfiltration beyond the stated purpose, persistence mechanisms, obfuscation, or prompt injection attempts against the agent to subvert its intended behavior.