← Back to Skills Marketplace
Civic
by
civictechuser
· GitHub ↗
· v0.1.0
299
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-civic-skill
Description
Connect to Civic MCP for 100+ integrations.
Usage Guidance
This skill appears to do what it says: it connects an agent to a Civic MCP instance and either uses mcporter or runs the provided TypeScript runner. Before installing or enabling: 1) Only provide a Civic token with least privilege necessary (avoid admin/global tokens). 2) Be aware the SKILL.md suggests storing the token in ~/.openclaw/openclaw.json (plaintext on disk) — rotate and revoke tokens if you stop using the skill. 3) The token grants access to many downstream services (Gmail, databases, Box); check Civic scopes and trust the Civic account you connect. 4) If you plan to run the TypeScript runner, inspect the included civic-tool-runner.ts (present in the package) and prefer to run it in a controlled environment; installing global tools like mcporter or npm packages can execute code from npm—only install from trusted sources. 5) If you need higher assurance, request the skill publisher/source or verify release provenance (official Civic docs/domains) before use.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-civic-skill
Version: 0.1.0
The skill bundle is a legitimate bridge to the Civic MCP (Model Context Protocol) service, enabling an AI agent to interact with various third-party integrations like Gmail and PostgreSQL. The TypeScript runner (`civic-tool-runner.ts`) is a standard implementation of an MCP client using the official SDK, and the instructions in `SKILL.md` correctly guide the agent on tool discovery and execution without any signs of prompt injection or malicious intent. No evidence of data exfiltration, unauthorized execution, or obfuscation was found.
Capability Assessment
Purpose & Capability
Name/description claim a Civic MCP bridge and the skill requires a CIVIC_URL and CIVIC_TOKEN plus either mcporter or npx to run the included TypeScript runner—these requirements match the described functionality and are proportionate.
Instruction Scope
SKILL.md instructs the agent (and the user) to run mcporter or npx tsx to call Civic tools and to store CIVIC_URL/CIVIC_TOKEN in ~/.openclaw/openclaw.json. That is expected for this bridge, but it means the token will be persisted on disk in the OpenClaw config if the user follows the instructions; users should be aware of that persistence.
Install Mechanism
No install spec in the registry (instruction-only), but the package includes a script and package.json/pnpm-lock.yaml. There is no opaque remote download URL; dependencies come from the npm ecosystem and a lockfile is present, which reduces uncertainty. Running the script uses npx/tsx and will rely on npm-installed dependencies at runtime—normal for this kind of tool.
Credentials
Only CIVIC_URL and CIVIC_TOKEN are required and CIVIC_TOKEN is declared as the primary credential—this is appropriate. Note: the token grants access to all Civic-connected integrations (Gmail, databases, Box, etc.), so its scope and privileges matter a lot even though only a single credential is requested.
Persistence & Privilege
Skill is not always-on and does not request elevated platform privileges. The SKILL.md asks the user to add credentials to ~/.openclaw/openclaw.json (user action), but the skill does not autonomously modify other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-civic-skill - After installation, invoke the skill by name or use
/openclaw-civic-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of the openclaw-civic-skill.
- Connect to Civic MCP for 100+ integrations, including Gmail, PostgreSQL, MongoDB, and Box.
- Supports both mcporter CLI and a TypeScript script fallback for tool execution.
- Provides detailed setup instructions for environment variables and configuration files.
- Handles OAuth authorization flows with user interaction steps.
- Includes notes on API latency and token expiration.
Metadata
Frequently Asked Questions
What is Civic?
Connect to Civic MCP for 100+ integrations. It is an AI Agent Skill for Claude Code / OpenClaw, with 299 downloads so far.
How do I install Civic?
Run "/install openclaw-civic-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Civic free?
Yes, Civic is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Civic support?
Civic is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Civic?
It is built and maintained by civictechuser (@civictechuser); the current version is v0.1.0.
More Skills