← 返回 Skills 市场
edwardrodriguez703-design

Book Car Wash

作者 Lokuli · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1392
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install book-car-wash
功能描述
Book car-wash services through Lokuli MCP. Use when user needs to find and book car-wash. Triggers on requests like "book a car-wash", "find car-wash near me", or any car-wash service request.
使用说明 (SKILL.md)

uook car wash

Book car-wash services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "car-wash",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}
安全使用建议
This skill appears to try to book car washes by calling an external service (lokuli.com) and will send customer details (name, email, phone) and likely location. Before installing or using it: (1) verify the skill author and a trustworthy homepage/privacy policy for Lokuli; (2) confirm how the service is authenticated (API key, OAuth) — the skill does not declare any credentials; (3) ensure you consent to sending any personal data to that external domain; (4) if you want to test, run it in a sandbox and avoid providing real PII until you confirm the endpoint and security; and (5) ask the skill author to clarify the auth, consent, and how the zipCode/location is obtained. If you can't verify those points, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill Name: book-car-wash Version: 1.0.1 The skill bundle defines a 'book-car-wash' service that interacts with a specific external endpoint `https://lokuli.com/mcp/sse` to perform search, availability checks, and booking actions. All defined tools and their arguments (`search`, `check_availability`, `create_booking`) are directly aligned with the stated purpose of booking car-wash services. There is no evidence of prompt injection with malicious intent, data exfiltration beyond necessary booking details, malicious execution, persistence mechanisms, or obfuscation in the `_meta.json` or `SKILL.md` files.
能力评估
Purpose & Capability
The name/description (book car-wash via Lokuli MCP) align with the runtime instructions: SKILL.md provides JSON-RPC calls for search, check_availability, and create_booking against an MCP endpoint. However, the skill does not declare any authentication mechanism or explain how API access is authorized, which is unusual for a remote booking API and reduces confidence in the claimed capability.
Instruction Scope
Instructions explicitly direct the agent to call an external endpoint (https://lokuli.com/mcp/sse) and to send booking payloads that include customerName, customerEmail, and customerPhone. That is consistent with booking functionality, but the instructions do not: (1) state how to obtain/require user consent for sending PII, (2) specify authentication or headers, (3) explain how location/zipCode is determined (SKILL.md uses a hardcoded zip 90640), and (4) reconcile 'SSE' transport with JSON-RPC POST examples (ambiguous). These gaps increase the risk of unintended data disclosure.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing is written to disk by the skill package itself.
Credentials
The skill declares no required environment variables or credentials, yet it targets an external API endpoint. Real-world booking APIs typically require an API key or similar credential; the absence of any declared auth is suspicious (either the skill relies on platform-provided tooling not documented here, or it would make unauthenticated requests). The instructions also enable transmission of PII (name, email, phone) and potentially location data — this is proportional to booking functionally but should be explicitly documented and justified.
Persistence & Privilege
always is false and there is no requested persistent system modification. The skill does not ask to modify other skills or global agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install book-car-wash
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /book-car-wash 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Fixed display name
v1.0.0
Initial release
元数据
Slug book-car-wash
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Book Car Wash 是什么?

Book car-wash services through Lokuli MCP. Use when user needs to find and book car-wash. Triggers on requests like "book a car-wash", "find car-wash near me", or any car-wash service request. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1392 次。

如何安装 Book Car Wash?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install book-car-wash」即可一键安装,无需额外配置。

Book Car Wash 是免费的吗?

是的,Book Car Wash 完全免费(开源免费),可自由下载、安装和使用。

Book Car Wash 支持哪些平台?

Book Car Wash 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Book Car Wash?

由 Lokuli(@edwardrodriguez703-design)开发并维护,当前版本 v1.0.1。

💬 留言讨论