← Back to Skills Marketplace
307
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install mx-link
Description
通过 MorphixAI 统一链接和管理第三方账号（GitHub、GitLab、Gmail、Outlook、Jira、Slack 等），并通过代理安全调用第三方 API。
Usage Guidance
Before installing or enabling this skill, verify the MorphixAI service and the openclaw-morphixai plugin are legitimate and trustworthy. Ask the publisher: why does the OAuth connect link point to a pipedream.com static URL instead of morphix.app? Confirm where OAuth tokens and authorization codes are routed and stored. Avoid giving the MORPHIXAI_API_KEY 'all scopes' unless you understand and accept the full permissions; prefer creating a key with minimal required scopes. Prefer dedicated platform skills (the SKILL.md itself advises this) rather than the proxy path for platforms that have first‑class integrations. If you must use this skill, limit the API key scope, review the openclaw-morphixai plugin code/manifest (or vendor) to see how requests are proxied and where credentials are stored, and monitor proxy usage for unexpected destinations or exfiltration patterns.
Capability Analysis
Type: OpenClaw Skill
Name: mx-link
Version: 0.1.1
The 'office-link' skill (mx-link) is a management interface for the MorphixAI service, designed to link third-party accounts (GitHub, Slack, etc.) and proxy API requests. The instructions in SKILL.md are well-structured, providing clear guidance for the AI agent to prioritize dedicated skills and use the proxy action only as a fallback. It uses standard OAuth connection flows via Pipedream and requires a user-provided API key, with no evidence of malicious intent, data exfiltration, or deceptive prompt injection.
Capability Assessment
Purpose & Capability
The skill claims to mediate and proxy third‑party API calls via MorphixAI and only requires a single MORPHIXAI_API_KEY env var, which is proportionate. It also tells users to install an external plugin (openclaw-morphixai) — reasonable but the skill doesn't include that plugin or an install spec, so availability is assumed. Overall capability requested aligns with the described purpose, but some implementation choices (see instruction scope) are unexpected.
Instruction Scope
SKILL.md instructs the agent to create OAuth connect links and to use a generic proxy action that can hit arbitrary third‑party endpoints using linked accounts. It also shows the returned OAuth link hosted at a pipedream.com static URL (https://pipedream.com/_static/connect.html?...), which is not the morphix.app domain described elsewhere — this is an incoherence that could mean OAuth redirects or tokens flow through a third party. The doc also tells users to 'select all scopes' when creating the API key, which requests broad privileges without justification. The proxy design (free‑form URL, method, body) can be used to call arbitrary endpoints — expected for a general proxy but increases risk of unintended data exposure or misuse.
Install Mechanism
No install spec and no code files (instruction-only). That reduces local attack surface because nothing is written/executed on the user's host by the skill itself. However, the SKILL.md depends on an external plugin (openclaw-morphixai) and an external service (morphix.app) which are outside this package — the skill assumes those are present.
Credentials
Only MORPHIXAI_API_KEY is required, which matches the described architecture. However, the instructions explicitly tell users to create an API key with all scopes selected, which is broader than necessary to 'list accounts' and 'proxy calls' and increases blast radius if the key is compromised. The doc also suggests storing the key in config files (~/.openclaw/.env or openclaw.json) — normal but worth guarding. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request always: true and does not try to modify other skills or system settings. It allows normal autonomous invocation (disable-model-invocation: false), which is the platform default and not in itself a concern. No additional persistent privileges are requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mx-link - After installation, invoke the skill by name or use
/mx-link - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
**mx-link v0.1.1**
- 新增「前置条件」说明，包含插件安装、API Key 获取/配置、账号管理入口，提升新手使用友好性
- 环境变量和 openclaw.json 配置示例更新，更贴合新版 MorphixAI 插件结构（`morphix.apiKey`）
- 简化安装和账号链接流程，推荐使用 MorphixAI 控制台统一管理连接
- 文档结构微调，突出专用 skill 优先原则和操作指导
v0.1.0
office-link 0.1.0 初始版本发布
- 支持统一管理和链接多种第三方账号（GitHub、GitLab、Gmail、Outlook、Jira、Slack、Notion、Google Sheets、等）。
- 通过代理安全调用第三方 API，Bot 不直接持有 OAuth token，所有请求经 MorphixAI 服务端中转。
- 明确要求：如有专用 skill，必须优先使用专用 skill，proxy 仅作兜底调用无专用 skill 的平台。
- 支持自动查已链接账号、引导 OAuth 链接、统一调用和参数格式。
- 支持 40+ 平台账号接入和操作流程。
- 详细说明授权、proxy 调用方法，以及常见错误和配置方式。
Metadata
Frequently Asked Questions
What is Office Link?
通过 MorphixAI 统一链接和管理第三方账号（GitHub、GitLab、Gmail、Outlook、Jira、Slack 等），并通过代理安全调用第三方 API。 It is an AI Agent Skill for Claude Code / OpenClaw, with 307 downloads so far.
How do I install Office Link?
Run "/install mx-link" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Office Link free?
Yes, Office Link is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Office Link support?
Office Link is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Office Link?
It is built and maintained by Paul Leo (@paul-leo); the current version is v0.1.1.
More Skills