← 返回 Skills 市场
1347
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install book-blowout
功能描述
Book blowout services through Lokuli MCP. Use when user needs to find and book blowout. Triggers on requests like "book a blowout", "find blowout near me", or any blowout service request.
使用说明 (SKILL.md)
uook ulowout
Book blowout services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "blowout",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "[email protected]",
"customerPhone": "+13105551234"
}
}
}
安全使用建议
This skill appears to do what it says (search and book blowout services) but has gaps you should clear up before installing or using it with real customer data: 1) Authentication: ask the author whether Lokuli's MCP requires an API key or token and where that credential is stored; do not provide platform or personal credentials until you confirm how they are used and protected. 2) Privacy & consent: the skill's examples show sending name, email, and phone to an external endpoint — confirm the data retention policy and get explicit user consent before sending PII. 3) Behavior mismatch: the SKILL.md example hard-codes zipCode (90640) and uses placeholder timestamps — request that the skill use the user's real location/time and validate inputs. 4) Endpoint verification: confirm the domain (lokuli.com) is legitimate, uses TLS, and has a published API/docs; avoid calling unknown third-party endpoints with real user data. 5) If you must proceed, test with synthetic data first and prefer a version that declares required credentials and documents auth, error handling, and privacy. If the author cannot justify the missing auth and the hard-coded location, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: book-blowout
Version: 1.0.1
The skill bundle defines tools to interact with the `https://lokuli.com/mcp/sse` endpoint for booking blowout services. All defined actions (search, check_availability, create_booking) and their arguments (e.g., customerName, customerEmail, customerPhone) are directly aligned with the stated purpose of booking services. There is no evidence of malicious execution, data exfiltration to unauthorized endpoints, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in SKILL.md.
能力评估
Purpose & Capability
Name and description match the instructions (search, check_availability, create_booking against a Lokuli MCP endpoint). However the SKILL.md hard-codes a zip code (90640) and contains placeholder customer data and dated sample times, which is inconsistent with triggers like 'near me' and real booking usage. Also the skill references an external MCP endpoint but declares no credentials or config that would typically be needed for a third-party booking API.
Instruction Scope
Instructions direct the agent to send customer-identifying information (name, email, phone) to an external endpoint (https://lokuli.com/mcp/sse) via JSON-RPC/SSE. The SKILL.md does not specify authentication, error handling, consent collection, or what data will be stored/returned. It also uses a fixed zipCode in the example rather than using the user's actual location, which is scope/behavior mismatch vs. the 'near me' trigger.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest disk/installation risk. Nothing is downloaded or written by the skill itself.
Credentials
No environment variables or credentials are requested, which reduces credential-exfiltration risk but is unusual given the external API endpoint. If Lokuli's MCP requires an API key or token, the absence of declared credentials is a gap (either the endpoint is public/anonymous or the skill assumes platform-level tooling will supply auth).
Persistence & Privilege
always is false and the skill is user-invocable only. It does not request persistent system-wide privileges or to modify other skills/configuration.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install book-blowout - 安装完成后,直接呼叫该 Skill 的名称或使用
/book-blowout触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Fixed display name
v1.0.0
Initial release
元数据
常见问题
Book Blowout 是什么?
Book blowout services through Lokuli MCP. Use when user needs to find and book blowout. Triggers on requests like "book a blowout", "find blowout near me", or any blowout service request. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1347 次。
如何安装 Book Blowout?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install book-blowout」即可一键安装,无需额外配置。
Book Blowout 是免费的吗?
是的,Book Blowout 完全免费(开源免费),可自由下载、安装和使用。
Book Blowout 支持哪些平台?
Book Blowout 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Book Blowout?
由 Lokuli(@edwardrodriguez703-design)开发并维护,当前版本 v1.0.1。
推荐 Skills