Mcp Review

审查MCP Server工具实现是否符合接口设计准则。当用户要求review、检查、审查MCP工具定义，或说"check一下工具设计"、"review mcp tools"、"工具设计有没有问题"时使用。

This skill is instruction-only and internally consistent with its stated purpose. Before installing or running it: 1) confirm you trust the skill source (owner unknown); 2) be aware it will read repository files (searching for **/*server*.py and @mcp.tool()), so don't run it on repos containing secrets or private credentials; 3) verify the included guide path (.claude/skills/mcp-review/MCP_API_DESIGN_GUIDE.md) is available in your environment or adjust the path; 4) check what the allowed tool named "Agent" means in your platform (ensure it does not permit unexpected remote actions); and 5) run it on a sample or sandbox repo first to observe outputs. Overall the design appears coherent and proportionate, with no requested credentials or install-time network downloads.

Type: OpenClaw Skill Name: mcp-review Version: 1.0.0 The skill bundle is designed to review MCP (Model Context Protocol) server tool definitions against a set of design guidelines. It uses standard file-access tools (Read, Glob, Grep) to analyze source code files for specific patterns like '@mcp.tool()' and provides structured feedback based on the provided 'MCP_API_DESIGN_GUIDE.md'. The instructions in 'SKILL.md' are strictly focused on the code review task and include security-positive checks such as PII masking (C10) and write-operation safety (C9). No malicious intent, data exfiltration, or harmful execution patterns were found.