Outline MCP

Model Context Protocol (MCP) bridge for Outline (getoutline.com). Enables AI agents to search, read, create, and manage documents, collections, and comments...

This skill appears to do what it claims (an Outline MCP bridge) and needs your Outline API key and MCP URL. The main risk is its upload/bulk-sync tools: they read arbitrary absolute file paths on the host (via fs.readFileSync) and then upload those files to your Outline workspace. Before installing: 1) Only enable this skill on trusted hosts or in isolated containers; do not run it on multi-tenant or developer laptops with sensitive files. 2) Use an Outline API key with the minimum privileges possible and rotate it if exposed. 3) Consider removing or disabling the 'upload'/'bulk-sync' tools if you only need read/metadata features. 4) Inspect or vendor the npm dependencies (package-lock.json) before running npm install, and run npm install in an environment where you can audit network activity. 5) Monitor logs for unexpected file access and restrict the user account running OpenClaw (don't run as root). If you want a lower-risk alternative, request a read-only skill variant that does not accept host file paths or that only accepts files explicitly staged by an operator.

Type: OpenClaw Skill Name: outline-app-mcp Version: 1.3.4 The skill provides a bridge to the Outline documentation platform but includes scripts (bulk_sync.mjs and mcp_bridge.mjs) that allow an AI agent to read and upload arbitrary files from the host filesystem using absolute paths. While the documentation in SKILL.md explicitly warns about this risk, the implementation lacks path sanitization or directory restricted scoping, creating a significant vector for data exfiltration of sensitive local files (e.g., credentials, SSH keys) if the agent is misdirected. The behavior is plausibly aligned with the stated purpose of bulk media uploads, but the broad filesystem access constitutes a high-risk capability.