← 返回 Skills 市场
1400
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install book-painter
功能描述
Book painter services through Lokuli MCP. Use when user needs to find and book painter. Triggers on requests like "book a painter", "find painter near me", or any painter service request.
使用说明 (SKILL.md)
uook painter
Book painter services through Lokuli's MCP server.
MCP Endpoint
https://lokuli.com/mcp/sse
Transport: SSE | JSON-RPC 2.0 | POST requests
Tools
search
{
"method": "tools/call",
"params": {
"name": "search",
"arguments": {
"query": "painter",
"zipCode": "90640",
"maxResults": 20
}
}
}
check_availability
{
"method": "tools/call",
"params": {
"name": "check_availability",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"date": "2025-02-10"
}
}
}
create_booking
{
"method": "tools/call",
"params": {
"name": "create_booking",
"arguments": {
"providerId": "xxx",
"serviceId": "yyy",
"timeSlot": "2025-02-10T14:00:00-08:00",
"customerName": "John Doe",
"customerEmail": "[email protected]",
"customerPhone": "+13105551234"
}
}
}
安全使用建议
Before installing or enabling this skill, confirm the following: (1) Authentication: ask the skill author how the Lokuli MCP endpoint is authenticated — require explicit documentation of required env vars or that the platform's 'tools/call' provides the credentialing. Do not assume credentials are unnecessary. (2) Data handling: verify what user data (name, email, phone, location) will be sent, where it goes (lokuli.com), and whether the user consents. (3) Dynamic inputs: ensure the skill will use the user's actual location/time preferences instead of hardcoded values (the SKILL.md shows zipCode: 90640 and placeholder IDs). (4) Endpoint legitimacy: confirm the domain (lokuli.com) is the intended service and review its privacy/security posture. (5) Minimum permissions: prefer a skill that declares required environment variables or uses documented platform tools for auth rather than relying on implicit secrets. If the author cannot clarify these points, treat the skill as higher risk and avoid sending real PII through it.
功能分析
Type: OpenClaw Skill
Name: book-painter
Version: 1.0.1
The skill bundle defines a 'book-painter' service that interacts with an external Lokuli MCP endpoint (https://lokuli.com/mcp/sse) using JSON-RPC 2.0. It provides tools for searching, checking availability, and creating bookings. While the `create_booking` tool handles customer PII (name, email, phone), this is directly aligned with the stated purpose of booking a service and is expected to be provided by the user. There is no evidence of malicious intent, data exfiltration beyond the skill's stated function, unauthorized command execution, or prompt injection attempts against the agent in `SKILL.md`.
能力评估
Purpose & Capability
The name/description (book/find painters) align with the listed JSON-RPC tool calls (search, check_availability, create_booking). However SKILL.md uses hardcoded example parameters (zipCode: 90640, example dates, providerId/serviceId as 'xxx'/'yyy', and example customer data) rather than describing how to obtain user-specific inputs. This is more of a usability/engineering omission than outright mismatch.
Instruction Scope
Instructions show calling Lokuli's MCP endpoint and the JSON-RPC payloads to search and create bookings; they do not instruct the agent to read unrelated files or environment variables. Concern: SKILL.md does not explain how authentication/authorization to the external endpoint should be handled, nor does it state how user PII (name, email, phone) will be collected/validated before sending. The use of example PII in the examples could encourage accidental transmission if the agent substitutes real data without safeguards.
Install Mechanism
This is an instruction-only skill with no install spec or code files, so there is no disk-installed payload to review. That minimizes install-time risk.
Credentials
The skill makes network calls to an external MCP endpoint (https://lokuli.com/mcp/sse) but declares no required environment variables or credentials. If the MCP API requires authentication (API key, OAuth token, or similar), the lack of declared credential requirements is a red flag — either the skill relies on undocumented platform-managed credentials/tools or it will attempt unauthenticated calls. Both possibilities warrant clarification.
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence. It is user-invocable and allows autonomous invocation (platform default), which is expected for skills of this type.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install book-painter - 安装完成后,直接呼叫该 Skill 的名称或使用
/book-painter触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Fixed display name
v1.0.0
Initial release
元数据
常见问题
Book Painter 是什么?
Book painter services through Lokuli MCP. Use when user needs to find and book painter. Triggers on requests like "book a painter", "find painter near me", or any painter service request. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1400 次。
如何安装 Book Painter?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install book-painter」即可一键安装,无需额外配置。
Book Painter 是免费的吗?
是的,Book Painter 完全免费(开源免费),可自由下载、安装和使用。
Book Painter 支持哪些平台?
Book Painter 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Book Painter?
由 Lokuli(@edwardrodriguez703-design)开发并维护,当前版本 v1.0.1。
推荐 Skills