← 返回 Skills 市场

Book Spa

Name: Book Spa
Author: edwardrodriguez703-design

作者 Lokuli · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

1351

总下载

当前安装

版本数

在 OpenClaw 中安装

/install book-spa

功能描述

Book spa services through Lokuli MCP. Use when user needs to find and book spa. Triggers on requests like "book a spa", "find spa near me", or any spa service request.

使用说明 (SKILL.md)

uook spa

Book spa services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "spa",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}

安全使用建议

Before installing, ask the publisher how authentication to Lokuli's MCP is handled and where API keys/sessions are stored — the skill currently declares no credentials. Require explicit user confirmation before create_booking is executed (or set disableModelInvocation: true) so the model cannot place bookings autonomously. Verify that the hosting platform's tools/call will not leak booking recipient PII and that a sandbox/testing mode exists to validate behavior without making real bookings. If you cannot get clear answers about auth and confirmation safeguards, treat this skill as high-risk and do not enable it for production use.

功能分析

Type: OpenClaw Skill Name: book-spa Version: 1.0.1 The skill bundle defines tools for searching and booking spa services through a specific external endpoint, `https://lokuli.com/mcp/sse`, which aligns with its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's behavior or access sensitive data. The content of `SKILL.md` describes standard API calls for a booking service.

能力评估

ℹ Purpose & Capability

Name/description and SKILL.md align: the skill describes searching, checking availability, and creating bookings via Lokuli's MCP. However, no credentials or auth mechanism are declared even though the SKILL.md references a remote MCP endpoint (https://lokuli.com/mcp/sse) that in practice is likely to require authentication.

✓ Instruction Scope

Runtime instructions are narrowly scoped to calling the Lokuli MCP via JSON-RPC 'tools/call' methods (search, check_availability, create_booking). The instructions do not request reading local files, environment variables, or unrelated system state. They do include placeholder/example fields (dates, providerId/serviceId, customer contact) that must be supplied at runtime.

✓ Install Mechanism

Instruction-only skill with no install spec and no code files — minimal installation risk. Nothing is downloaded or written to disk by the skill itself.

⚠ Credentials

The skill declares no required environment variables or primary credential, yet it calls an external MCP endpoint to create bookings. This is inconsistent: booking APIs typically require API keys or authenticated sessions. It's unclear whether authentication is expected to be provided by the hosting platform/tooling (tools/call) or was omitted. In addition, create_booking templates include user PII (name, email, phone) — the skill should justify how/where credentials and user data are supplied and protected.

⚠ Persistence & Privilege

The skill does not set disableModelInvocation and therefore can be invoked autonomously by the model. Because it can create bookings (a side-effecting operation that uses personal contact info), allowing autonomous invocation increases risk of unintended bookings or data leakage. The skill also does not set any 'always' flag (which is good), but lacking an explicit model-invocation control is a concern for safety/privacy.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install book-spa
安装完成后，直接呼叫该 Skill 的名称或使用 /book-spa 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Fixed name

v1.0.0

Initial release

元数据

Slug book-spa

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题

Book Spa 是什么？

Book spa services through Lokuli MCP. Use when user needs to find and book spa. Triggers on requests like "book a spa", "find spa near me", or any spa service request. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1351 次。

如何安装 Book Spa？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install book-spa」即可一键安装，无需额外配置。

Book Spa 是免费的吗？

是的，Book Spa 完全免费（开源免费），可自由下载、安装和使用。

Book Spa 支持哪些平台？

Book Spa 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Book Spa？

由 Lokuli（@edwardrodriguez703-design）开发并维护，当前版本 v1.0.1。