← 返回 Skills 市场

Book Web Developer

Name: Book Web Developer
Author: edwardrodriguez703-design

作者 Lokuli · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

1545

总下载

当前安装

版本数

在 OpenClaw 中安装

/install book-web-developer

功能描述

使用说明 (SKILL.md)

uook weu developer

Book web-developer services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "web-developer",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}

安全使用建议

This skill appears to implement booking flows against an external Lokuli MCP endpoint and is otherwise reasonably scoped, but it has several red flags you should resolve before using it with real data: 1) Confirm who runs lokuli.com and whether you trust that service; 2) Ask the author or maintainer how authentication is handled (this SKILL.md provides no API key/token instructions); 3) Verify the host is official and that your agent platform supplies any needed credentials securely (do not paste secrets into the skill text); 4) Test with dummy/pseudonymous customer data first (the examples contain real-looking placeholders); 5) Request a clearer SKILL.md that removes hard-coded zip/dates and explains error handling and consent for transmitting personal info. If you cannot get answers about authentication and the endpoint’s trustworthiness, treat this skill as unsafe for real bookings.

功能分析

Type: OpenClaw Skill Name: book-web-developer Version: 1.0.1 The skill is classified as suspicious primarily due to its handling of Personally Identifiable Information (PII). It is designed to collect customer name, email, and phone number via the `create_booking` tool and transmit this data to an external endpoint, `https://lokuli.com/mcp/sse`. While this PII collection is plausibly needed for the stated purpose of booking services, it represents a significant risky capability without clear malicious intent. Additionally, a minor typo in the main title of `SKILL.md` (`# uook weu developer` instead of 'book web developer') adds a subtle, secondary suspicious element.

能力评估

ℹ Purpose & Capability

Name and description align with the instructions: the SKILL.md shows JSON-RPC calls (search, check_availability, create_booking) to a Lokuli MCP endpoint for booking developers. This is coherent for a booking skill, but examples include hard-coded zip code, dates, and placeholder customer data which suggests the document is incomplete or not production-ready.

✓ Instruction Scope

The runtime instructions are narrowly scoped to searching providers, checking availability, and creating bookings via the declared MCP endpoint and tool calls; they do not instruct reading local files, system credentials, or unrelated data sources.

✓ Install Mechanism

This is an instruction-only skill with no install spec or code files, so there is no install-time code being downloaded or written to disk.

⚠ Credentials

No environment variables or credentials are declared, yet the MCP endpoint is external and likely requires authentication or API keys in practice. The SKILL.md provides no guidance on auth, error handling, or where credentials would come from; that omission is suspicious because a booking API typically needs some form of auth and/or user consent before transmitting personal data (name, email, phone).

✓ Persistence & Privilege

Skill does not request persistent installation privileges (always is false) and does not attempt to modify other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install book-web-developer
安装完成后，直接呼叫该 Skill 的名称或使用 /book-web-developer 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Fixed display name

v1.0.0

Initial release

元数据

Slug book-web-developer

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题