← Back to Skills Marketplace
1311
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mymcdonald
Description
麦当劳助手 - 查询/领取优惠券、活动日历、餐品营养信息、门店查询
Usage Guidance
What to consider before installing:
- Source unknown: The skill has no homepage and an unknown owner — treat it as unvetted. Verify the MCP endpoint (https://mcp.mcd.cn) is legitimate before providing any token.
- Token required but not declared in metadata: SKILL.md expects MCD_TOKEN (and optional MCD_MCP_URL), yet the registry metadata listed no required env vars. That mismatch is suspicious; assume the skill will need your MCD_TOKEN to operate.
- Sensitive capability: With your MCD_TOKEN the skill can perform state-changing actions (auto-bind-coupons) against your account. Only grant a token you control, and prefer a limited-scope or revocable token if possible.
- Operational safety: Configure the agent to ask for explicit user confirmation before running the "auto-bind-coupons" or any action that modifies your account. Consider allowing read-only calls (list coupons, nutrition) first and test behavior.
- Token handling: Never paste tokens into public chats. Store MCD_TOKEN in a secure place and rotate/revoke it if you stop using the skill or see unexpected activity.
- Rate limits & privacy: The skill warns about rate limits; avoid automated high-frequency polling. Review what personal data the MCP API returns and whether you are comfortable sharing it with the agent.
If you need higher assurance, ask the skill author for a homepage/source repo, a declared list of required env vars in the registry metadata, and documentation of token scopes and safety controls.
Capability Analysis
Type: OpenClaw Skill
Name:
Developer:
Version:
Description: OpenClaw Agent Skill
The skill is designed to interact with a McDonald's API (`mcp.mcd.cn`) to query and manage coupons, view activity calendars, and access nutrition information. It requires an `MCD_TOKEN` for authentication, which is sent only to the specified McDonald's domain. All `curl` commands are directed to this legitimate endpoint and perform actions consistent with the stated purpose. There is no evidence of prompt injection, unauthorized data exfiltration, malicious execution, or persistence mechanisms.
Capability Assessment
Purpose & Capability
The skill's described purpose (query/claim coupons, nutrition, calendar, store lookup) aligns with the curl-based MCP API calls in SKILL.md. However, the registry metadata claims no required environment variables while SKILL.md explicitly requires MCD_TOKEN (and optionally MCD_MCP_URL). That metadata mismatch is an important inconsistency (the token is appropriate for the stated purpose, but it should have been declared).
Instruction Scope
The instructions are explicit: run curl POSTs to https://mcp.mcd.cn (or MCD_MCP_URL) using Authorization: Bearer $MCD_TOKEN and parse JSON-RPC results. They do not instruct the agent to read unrelated files or system credentials. One caveat: the skill includes an auto-bind-coupons tool that will modify the user account (claim coupons) — this is within the claimed scope but is a state-changing operation that should require user consent.
Install Mechanism
No install spec or code files — instruction-only skill. This is lower risk because nothing is written to disk by the skill package itself.
Credentials
SKILL.md requires an API token (MCD_TOKEN) which is proportionate to calling a user-scoped McDonald's API. But the registry metadata lists no required env vars, creating an inconsistency. The token is a sensitive credential and the skill would have direct capability to act on the user's account (including claiming coupons). No other unrelated credentials are requested.
Persistence & Privilege
always:false (normal). Model invocation is enabled (default), so the agent could autonomously call the MCP endpoints. Combined with the auto-bind-coupons action, that means the skill could perform account-altering operations automatically unless you configure the agent to require confirmation — recommend requiring explicit user confirmation for write operations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mymcdonald - After installation, invoke the skill by name or use
/mymcdonald - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- 首发版本，推出麦当劳助手 skill
- 支持查询/领取优惠券、活动日历、餐品营养信息与套餐搭配
- 支持查询门店及实时活动
- 需配置麦当劳 MCP Token，基于官方服务获取实时数据
Metadata
Frequently Asked Questions
What is My Mcdonald?
麦当劳助手 - 查询/领取优惠券、活动日历、餐品营养信息、门店查询. It is an AI Agent Skill for Claude Code / OpenClaw, with 1311 downloads so far.
How do I install My Mcdonald?
Run "/install mymcdonald" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is My Mcdonald free?
Yes, My Mcdonald is completely free (open-source). You can download, install and use it at no cost.
Which platforms does My Mcdonald support?
My Mcdonald is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created My Mcdonald?
It is built and maintained by Jiayu (@pmwalkercao); the current version is v1.0.0.
More Skills