← Back to Skills Marketplace
edwardrodriguez703-design

Book Blowout

by Lokuli · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1347
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install book-blowout
Description
Book blowout services through Lokuli MCP. Use when user needs to find and book blowout. Triggers on requests like "book a blowout", "find blowout near me", or any blowout service request.
README (SKILL.md)

uook ulowout

Book blowout services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "blowout",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}
Usage Guidance
This skill appears to do what it says (search and book blowout services) but has gaps you should clear up before installing or using it with real customer data: 1) Authentication: ask the author whether Lokuli's MCP requires an API key or token and where that credential is stored; do not provide platform or personal credentials until you confirm how they are used and protected. 2) Privacy & consent: the skill's examples show sending name, email, and phone to an external endpoint — confirm the data retention policy and get explicit user consent before sending PII. 3) Behavior mismatch: the SKILL.md example hard-codes zipCode (90640) and uses placeholder timestamps — request that the skill use the user's real location/time and validate inputs. 4) Endpoint verification: confirm the domain (lokuli.com) is legitimate, uses TLS, and has a published API/docs; avoid calling unknown third-party endpoints with real user data. 5) If you must proceed, test with synthetic data first and prefer a version that declares required credentials and documents auth, error handling, and privacy. If the author cannot justify the missing auth and the hard-coded location, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill Name: book-blowout Version: 1.0.1 The skill bundle defines tools to interact with the `https://lokuli.com/mcp/sse` endpoint for booking blowout services. All defined actions (search, check_availability, create_booking) and their arguments (e.g., customerName, customerEmail, customerPhone) are directly aligned with the stated purpose of booking services. There is no evidence of malicious execution, data exfiltration to unauthorized endpoints, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in SKILL.md.
Capability Assessment
Purpose & Capability
Name and description match the instructions (search, check_availability, create_booking against a Lokuli MCP endpoint). However the SKILL.md hard-codes a zip code (90640) and contains placeholder customer data and dated sample times, which is inconsistent with triggers like 'near me' and real booking usage. Also the skill references an external MCP endpoint but declares no credentials or config that would typically be needed for a third-party booking API.
Instruction Scope
Instructions direct the agent to send customer-identifying information (name, email, phone) to an external endpoint (https://lokuli.com/mcp/sse) via JSON-RPC/SSE. The SKILL.md does not specify authentication, error handling, consent collection, or what data will be stored/returned. It also uses a fixed zipCode in the example rather than using the user's actual location, which is scope/behavior mismatch vs. the 'near me' trigger.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest disk/installation risk. Nothing is downloaded or written by the skill itself.
Credentials
No environment variables or credentials are requested, which reduces credential-exfiltration risk but is unusual given the external API endpoint. If Lokuli's MCP requires an API key or token, the absence of declared credentials is a gap (either the endpoint is public/anonymous or the skill assumes platform-level tooling will supply auth).
Persistence & Privilege
always is false and the skill is user-invocable only. It does not request persistent system-wide privileges or to modify other skills/configuration.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install book-blowout
  3. After installation, invoke the skill by name or use /book-blowout
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fixed display name
v1.0.0
Initial release
Metadata
Slug book-blowout
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Book Blowout?

Book blowout services through Lokuli MCP. Use when user needs to find and book blowout. Triggers on requests like "book a blowout", "find blowout near me", or any blowout service request. It is an AI Agent Skill for Claude Code / OpenClaw, with 1347 downloads so far.

How do I install Book Blowout?

Run "/install book-blowout" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Book Blowout free?

Yes, Book Blowout is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Book Blowout support?

Book Blowout is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Book Blowout?

It is built and maintained by Lokuli (@edwardrodriguez703-design); the current version is v1.0.1.

💬 Comments