← Back to Skills Marketplace
edwardrodriguez703-design

Book Tattoo

by Lokuli · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1369
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install book-tattoo
Description
Book tattoo services through Lokuli MCP. Use when user needs to find and book tattoo. Triggers on requests like "book a tattoo", "find tattoo near me", or any tattoo service request.
README (SKILL.md)

uook tattoo

Book tattoo services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "tattoo",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}
Usage Guidance
This skill appears to do what it says (search and book tattoos via Lokuli), but you should verify a few things before installing or using it: 1) Source trust: there is no homepage or author information—confirm you trust lokuli.com and the skill author. 2) Authentication: ask how the MCP endpoint is authorized; the skill declares no API keys or tokens — installing without knowing how auth is handled could leak your booking data if misconfigured. 3) Privacy: SKILL.md includes example personal data and a hard-coded zip code; ensure the agent will never send your real name, email, or phone to the endpoint without explicit consent. 4) Behavior: require the agent to ask you for confirmation of provider, date/time, and your contact details before calling create_booking. If you need assurance, request the author to: (a) document the auth mechanism, (b) remove hard-coded PII and zip code from examples, and (c) add explicit user-consent steps in SKILL.md. Given the unknown origin and missing auth details, proceed cautiously or seek a version with clearer provenance and authentication.
Capability Analysis
Type: OpenClaw Skill Name: book-tattoo Version: 1.0.1 The skill bundle defines a 'book-tattoo' skill that interacts with an external MCP endpoint at `https://lokuli.com/mcp/sse` to search for, check availability, and create bookings for tattoo services. All defined tools and instructions in `SKILL.md` are directly aligned with this stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or harmful prompt injection attempts. The handling of customer PII (name, email, phone) is part of the legitimate booking process, not unauthorized exfiltration. The minor typo '# uook tattoo' in `SKILL.md` does not indicate malicious intent.
Capability Assessment
Purpose & Capability
The name and description (book tattoo via Lokuli MCP) align with the instructions (search, check_availability, create_booking RPC calls). However the skill references an external MCP endpoint (https://lokuli.com/mcp/sse) but declares no credentials or auth mechanism; that omission is unexpected for a third-party booking API.
Instruction Scope
SKILL.md is instruction-only and limits actions to JSON-RPC calls to the MCP endpoint via platform tools. It does not ask to read files or environment state. Concerns: it contains hard-coded example customer data (John Doe, [email protected], +13105551234) and a hard-coded zipCode (90640) which could accidentally be used if not replaced; the file does not require explicit user confirmation before creating bookings.
Install Mechanism
No install spec and no code files — instruction-only — so nothing is written to disk and there is low install risk.
Credentials
The skill requests no environment variables or credentials. That is coherent if the platform supplies the tools and authentication, but incoherent if the MCP endpoint actually requires API keys or tokens. The lack of declared auth is an information gap that should be clarified.
Persistence & Privilege
always:false and the skill is user-invocable — normal and appropriately scoped. It does not request persistent system-level presence.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install book-tattoo
  3. After installation, invoke the skill by name or use /book-tattoo
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fixed display name
v1.0.0
Initial release
Metadata
Slug book-tattoo
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Book Tattoo?

Book tattoo services through Lokuli MCP. Use when user needs to find and book tattoo. Triggers on requests like "book a tattoo", "find tattoo near me", or any tattoo service request. It is an AI Agent Skill for Claude Code / OpenClaw, with 1369 downloads so far.

How do I install Book Tattoo?

Run "/install book-tattoo" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Book Tattoo free?

Yes, Book Tattoo is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Book Tattoo support?

Book Tattoo is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Book Tattoo?

It is built and maintained by Lokuli (@edwardrodriguez703-design); the current version is v1.0.1.

💬 Comments