功能描述

Book personal-trainer services through Lokuli MCP. Use when user needs to find and book personal-trainer. Triggers on requests like "book a personal-trainer", "find personal-trainer near me", or any personal-trainer service request.

使用说明 (SKILL.md)

uook personal trainer

Name: Book Personal Trainer
Author: edwardrodriguez703-design

Book personal-trainer services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "personal-trainer",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}

安全使用建议

This skill looks like it does what it says (search/check/create bookings), but there are unclear and potentially risky gaps. Before installing, ask: (1) How is authentication to https://lokuli.com/mcp/sse handled? Should the skill declare an API key or rely on platform tools? (2) Will the agent prompt users for their location/contact info and preferred times, or will it use the hard-coded zipCode and example customer data in SKILL.md? (3) Who operates the Lokuli endpoint (no homepage/source given)? If you proceed, insist the skill be updated to remove hard-coded defaults, explicitly request only the credentials it needs (and document how they're stored/used), and confirm the platform's tool-layer provides any required auth rather than the skill embedding secrets.

功能分析

Type: OpenClaw Skill Name: book-personal-trainer Version: 1.0.1 The skill is designed to book personal trainer services through a specified external endpoint (https://lokuli.com/mcp/sse). It uses internal tools for searching, checking availability, and creating bookings, which align with its stated purpose. There is no evidence of data exfiltration beyond necessary booking information to the designated service, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The minor typo in the markdown title ('uook' instead of 'book') does not indicate malicious intent.

能力评估

ℹ Purpose & Capability

The name/description (book personal trainers via Lokuli MCP) aligns with the SKILL.md which shows search, availability check, and booking RPCs. However the skill references an external MCP endpoint (https://lokuli.com/mcp/sse) but declares no credentials or environment variables. It's unclear whether the platform provides built-in auth for that endpoint or whether the skill should have required API keys; that omission reduces clarity/proportionality.

⚠ Instruction Scope

The instructions are narrowly scoped to search/check/create booking RPC calls (no unrelated actions). But the payload examples include hard-coded values (zipCode: "90640", fixed dates, and example customer contact details). The skill does not instruct the agent to prompt the user for their actual zip code, date/time preferences, or contact info; if used as-is the skill could default to incorrect data or inadvertently submit placeholders. Using fixed location and PII-like example values is a functional and privacy concern.

✓ Install Mechanism

This is an instruction-only skill with no install spec and no code files, so nothing is written to disk and no external packages are fetched. That minimizes install-time risk.

⚠ Credentials

The skill requests no environment variables or credentials but expects to call an external MCP endpoint. Booking services typically require authentication (API key, token, or platform-scoped tool permissions). The absence of any declared credential or primaryEnv is surprising and could indicate incomplete metadata or an assumption that platform-level tools provide the auth — the mismatch is concerning because it affects whether the skill can actually operate as described and whether auth would be handled securely.

✓ Persistence & Privilege

always is false and there are no install-time or persistence actions described. The skill does not request persistent privileges or modify other skills' configs.

版本历史

v1.0.1

Fixed display name

v1.0.0

Initial release

元数据

Slug book-personal-trainer

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题

Book Personal Trainer 是什么？

Book personal-trainer services through Lokuli MCP. Use when user needs to find and book personal-trainer. Triggers on requests like "book a personal-trainer", "find personal-trainer near me", or any personal-trainer service request. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1354 次。

如何安装 Book Personal Trainer？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install book-personal-trainer」即可一键安装，无需额外配置。

Book Personal Trainer 是免费的吗？

是的，Book Personal Trainer 完全免费（开源免费），可自由下载、安装和使用。

Book Personal Trainer 支持哪些平台？

Book Personal Trainer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Book Personal Trainer？

由 Lokuli（@edwardrodriguez703-design）开发并维护，当前版本 v1.0.1。

Book Personal Trainer