← 返回 Skills 市场

Book Piano Lessons

Name: Book Piano Lessons
Author: edwardrodriguez703-design

作者 Lokuli · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

1431

总下载

当前安装

版本数

在 OpenClaw 中安装

/install book-piano-lessons

功能描述

使用说明 (SKILL.md)

uook piano lessons

Book piano-lessons services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "piano-lessons",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}

安全使用建议

This skill appears to implement booking via Lokuli's MCP server and avoids installing code, but there are unanswered questions you should resolve before installing or using it: confirm the legitimacy of the lokuli.com endpoint and the skill author (no homepage/source provided); ask whether the MCP API requires authentication and, if so, how credentials are supplied/stored; check how the agent will gather and confirm user personal data (name/email/phone) and ensure explicit consent before sending it; clarify the transport semantics (SSE vs POST/JSON-RPC) to avoid accidental leaks or malformed requests; and test any booking calls in a safe sandbox account so real appointments or payments are not accidentally created. If you cannot get clear answers about authentication and data handling, treat the skill as untrusted.

功能分析

Type: OpenClaw Skill Name: book-piano-lessons Version: 1.0.1 The skill bundle is benign. The `SKILL.md` file clearly defines the purpose as booking piano lessons through a specified Lokuli MCP endpoint (https://lokuli.com/mcp/sse) and outlines three tools (`search`, `check_availability`, `create_booking`) that align directly with this stated purpose. There is no evidence of prompt injection, malicious execution, data exfiltration, persistence mechanisms, or any other high-risk behaviors. The information requested (customer name, email, phone) is directly relevant to the booking functionality.

能力评估

ℹ Purpose & Capability

The name/description (book piano lessons through Lokuli MCP) lines up with the SKILL.md which supplies RPC payload examples for search, check_availability, and create_booking. However the skill provides no provenance (source/homepage unknown) and does not document authentication or required credentials for calling Lokuli's MCP endpoint — that gap is notable because booking APIs commonly require credentials.

⚠ Instruction Scope

Instructions are limited to JSON-RPC examples and an MCP endpoint, which is good from a minimal-scope perspective. Concerns: (1) transport description mixes SSE and POST/JSON-RPC in a confusing way (SSE is typically a GET/event stream, JSON-RPC often POST), (2) examples contain hard-coded zipCode (90640), dates (2025-02-10) and sample customer data — the skill does not instruct how to collect or sanitize real user data or consent, and (3) no guidance about authentication, logging, or where user PII (name/email/phone) will be sent/stored.

✓ Install Mechanism

Instruction-only skill with no install spec or code files — lowest risk for filesystem persistence or arbitrary code execution. Nothing is pulled from external URLs at install time.

✓ Credentials

The skill declares no required environment variables, credentials, or config paths. Given its purpose this is plausible if the Lokuli endpoint is public, but the absence of any auth requirement is unusual for a booking API and should be confirmed before use.

✓ Persistence & Privilege

always:false and default invocation settings — no elevated persistence requested and the skill does not claim to modify other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install book-piano-lessons
安装完成后，直接呼叫该 Skill 的名称或使用 /book-piano-lessons 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Fixed display name

v1.0.0

Initial release

元数据

Slug book-piano-lessons

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题