← 返回 Skills 市场

Book Nutritionist

Name: Book Nutritionist
Author: edwardrodriguez703-design

作者 Lokuli · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

1403

总下载

当前安装

版本数

在 OpenClaw 中安装

/install book-nutritionist

功能描述

使用说明 (SKILL.md)

uook nutritionist

Book nutritionist services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "nutritionist",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}

安全使用建议

This skill will send user contact information (name, email, phone) and location (zip code) to the external endpoint https://lokuli.com/mcp/sse. Before installing or using it, verify who operates lokuli.com and whether you trust them with PII; confirm the booking flow requires no API key or how authentication is handled; insist the agent prompt for and display the exact booking payload and ask for user consent before sending; and avoid providing real personal data until you’ve confirmed the service’s legitimacy and privacy practices. If you need stronger guarantees, prefer a skill that declares its auth method (API key) and documents data handling. If you want, I can draft a set of safety prompts the agent should use (consent, data preview, and validation) to reduce risk.

功能分析

Type: OpenClaw Skill Name: book-nutritionist Version: 1.0.1 The skill is designed to book nutritionist services through the Lokuli MCP server. It uses an external endpoint (https://lokuli.com/mcp/sse) and tools to search, check availability, and create bookings. While the `create_booking` tool sends customer PII (name, email, phone), this is directly aligned with the skill's stated purpose of booking services and does not constitute unauthorized data exfiltration. There is no evidence of malicious execution, persistence, or harmful prompt injection, only a minor typo in the SKILL.md title.

能力评估

ℹ Purpose & Capability

The name/description align with the SKILL.md examples (search, check_availability, create_booking). However, the skill references an external MCP endpoint (https://lokuli.com/mcp/sse) but declares no credentials or auth mechanism — this is plausible if the MCP is public but is unusual for a booking API and should be justified.

⚠ Instruction Scope

The instructions include explicit JSON-RPC payloads that contain/require customer PII (name, email, phone) and a zip code. They direct the agent to interact with an external service (lokuli.com) but do not instruct the agent to obtain explicit user consent, validate input, or show the outgoing payload before sending. Hard-coded example values and dates are present, which is sloppy and could lead to accidental data leakage if not replaced.

✓ Install Mechanism

Instruction-only skill with no install spec or code files — nothing is written to disk and no third-party packages are fetched, which minimizes install-time risk.

⚠ Credentials

The skill declares no required environment variables or credentials, yet it calls an external MCP endpoint and will transmit user PII. Booking APIs commonly require API keys/auth; absence of declared credentials is unexpected. There is a proportionality concern: transmitting PII to an external domain without clear auth, affiliation, or privacy guidance is not justified by the description alone.

✓ Persistence & Privilege

The skill does not request always:true and has no install-time persistence. It does not modify agent configuration or request elevated platform privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install book-nutritionist
安装完成后，直接呼叫该 Skill 的名称或使用 /book-nutritionist 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Fixed display name

v1.0.0

Initial release

元数据

Slug book-nutritionist

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题