McPorter Local

Use the mcporter CLI to list, configure, auth, and call MCP servers/tools directly (HTTP or stdio), including ad-hoc servers, config edits, and CLI/type gene...

This skill is an instruction-only adaptor for the mcporter CLI and is plausible for the stated purpose, but review these points before installing: - Metadata mismatch: registry metadata lists a different owner/slug than the _meta.json inside the package (ownerId/slug differ). That inconsistency can indicate packaging or publishing errors—verify the publisher and package provenance. - Verify the npm package: inspect the 'mcporter' npm package contents and its repository (or homepage) before installing; confirm the publisher identity, recent versions, and package integrity (checksum/signature) where possible. - Be cautious with data/exfiltration: mcporter supports calling arbitrary URLs and a stdio mode that can run local processes and stream data. Avoid using it with sensitive files or credentials until you trust the binary. - Check local config: by default it uses ./config/mcporter.json; review that file for stored credentials and avoid pointing the tool at directories containing secrets unless necessary. - Least privilege: run the mcporter binary in a restricted environment (non-root, limited filesystem scope) or inspect the package source manually if you need to run it in production. If you can provide the package repository link or the npm package SHA / publisher info, I can re-evaluate and raise or lower confidence.

Type: OpenClaw Skill Name: mcporter-local Version: 1.0.0 The skill bundle provides documentation and installation instructions for the 'mcporter' CLI tool, which is used to interact with Model Context Protocol (MCP) servers. The instructions in SKILL.md and the metadata in _meta.json are consistent with the tool's stated purpose of listing, configuring, and calling MCP tools, and there is no evidence of malicious intent, data exfiltration, or prompt injection.