Mysteel_BidSupply

支持钢材供需现货信息查询与招投标数据检索；当用户需要找采购方、找供应方、查询招投标信息或发现项目机会时使用

This skill appears to do what it says: query Mysteel bidding and supply/demand APIs. Before installing, consider the following: 1) API key handling — the scripts save the API key as plaintext in references/api_key.md inside the skill directory. Avoid storing long-lived secrets there if you care about leakage (prefer an environment variable or a secure secret store and update the scripts accordingly). 2) Output handling — SKILL.md asks not to show raw JSON, but the scripts print raw JSON; if you don't want raw responses exposed, make sure the agent or caller parses and sanitizes the output before displaying. 3) Network endpoints — the scripts call https://mcp.mysteel.com; verify that this domain is expected and acceptable for your use. 4) Dependencies — the scripts require the Python requests package. Run the tool in a controlled environment (sandbox) the first time to observe behavior and avoid committing the api_key.md file to version control. If you want higher assurance, request or review an explicit specification for how API keys should be provided (env var or OS secret store) and/or adjust the scripts to avoid writing plaintext credentials to disk.

Type: OpenClaw Skill Name: mysteel-bidsupply Version: 1.0.0 The skill is a legitimate tool for querying steel industry bidding and supply/demand data from the Mysteel platform (mcp.mysteel.com). The scripts (bidding_api.py, supply_demand_api.py) implement standard API interaction patterns, including local storage of a user-provided API key in references/api_key.md. The instructions in SKILL.md and intent-guide.md are focused on accurate parameter extraction and intent recognition, with no evidence of malicious behavior or data exfiltration.