← 返回 Skills 市场
1408
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install book-locksmith
功能描述
Book locksmith services through Lokuli MCP. Use when user needs to find and book locksmith. Triggers on requests like "book a locksmith", "find locksmith near me", or any locksmith service request.
使用说明 (SKILL.md)
uook locksmith
Book locksmith services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "locksmith",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "[email protected]",
"customerPhone": "+13105551234"
}
}
}
安全使用建议
This skill appears to do what it says (book locksmiths) but is incomplete and potentially risky in practice. Before installing or enabling it, ask the publisher or maintainer: (1) How is authentication to https://lokuli.com/mcp/sse handled? Where would an API key or token be stored? (2) Will the agent always prompt you to confirm address, zip code, date/time, and your contact details before creating a booking? (3) Is there a sandbox or dry-run mode to test behavior without placing real bookings or charges? (4) Does lokuli.com have a privacy/security policy you can review? If you proceed, require the skill to explicitly prompt for and confirm all personal info and to surface any costs/charges before creating bookings. Because the SKILL.md uses hardcoded ZIP and sample PII and provides no auth details, treat it as untrusted until these questions are answered.
功能分析
Type: OpenClaw Skill
Name: book-locksmith
Version: 1.0.1
The skill is suspicious due to the hardcoded customer details ('John Doe', '[email protected]', '+13105551234') within the `create_booking` tool definition in `SKILL.md`. While the external network call to `https://lokuli.com/mcp/sse` is expected for a booking service, the use of fixed personal information as default arguments poses a significant risk of unintended data submission or privacy issues if the agent uses these values without proper user input or confirmation.
能力评估
Purpose & Capability
The skill claims to book locksmiths via Lokuli's MCP endpoint, which is consistent with the name/description. However, the SKILL.md references an external API (https://lokuli.com/mcp/sse) but declares no credentials or auth mechanism. Booking services normally require authenticated API access and confirmation of customer details; the absence of any declared auth or explanation is a mismatch.
Instruction Scope
Instructions show JSON-RPC payloads for search, check_availability, and create_booking and would transmit personal data (customerName, customerEmail, customerPhone). The SKILL.md provides hardcoded example values (zipCode 90640, sample customer info) and gives no guidance to prompt the user for consent/verification, or to validate/location-match before placing a booking. It does not instruct reading unrelated system files or env vars, which is good, but it also lacks necessary runtime steps (auth, user confirmation, explicit input collection).
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write code to disk or pull external packages. That minimizes install-time risk.
Credentials
The registry metadata lists no required environment variables or primary credential, yet the SKILL.md expects the agent to call an external MCP endpoint. If the endpoint requires an API key/session token, that credential is missing from the declared requirements. Additionally, the skill will handle user PII for bookings but provides no declared requirement or guidance for securely obtaining/storing that data.
Persistence & Privilege
The skill is not always-enabled (always: false), is user-invocable, and does not request system or other skills' configuration. It does not request persistent presence or elevated privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install book-locksmith - 安装完成后，直接呼叫该 Skill 的名称或使用
/book-locksmith触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Fixed display name
v1.0.0
Initial release
元数据
常见问题
Book Locksmith 是什么？
Book locksmith services through Lokuli MCP. Use when user needs to find and book locksmith. Triggers on requests like "book a locksmith", "find locksmith near me", or any locksmith service request. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1408 次。
如何安装 Book Locksmith？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install book-locksmith」即可一键安装，无需额外配置。
Book Locksmith 是免费的吗？
是的，Book Locksmith 完全免费（开源免费），可自由下载、安装和使用。
Book Locksmith 支持哪些平台？
Book Locksmith 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Book Locksmith？
由 Lokuli（@edwardrodriguez703-design）开发并维护，当前版本 v1.0.1。
推荐 Skills