← Back to Skills Marketplace
157
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install skylv-mcp-server-builder
Description
MCP (Model Context Protocol) 服务器开发助手。从零构建 MCP 服务器、工具、提示模板。触发词：mcp、服务器、协议、工具构建。
Usage Guidance
This skill is a tutorial/scaffold for building an MCP server and includes example tools that can read/write arbitrary files and run database queries. That makes it potentially dangerous if you run the generated server without safeguards. Before using: review and harden any generated code (remove or restrict file_operations and database_query handlers), require explicit authentication/authorization for tool calls, avoid running on hosts containing sensitive data or as root, provide and document needed environment variables (e.g., DATABASE_URL) rather than leaving them implicit, and restrict tool input validation and allowed paths. Because the package is instruction-only (no install), the immediate platform risk is low—but follow the cautions above before building or deploying any server produced from these instructions.
Capability Analysis
Type: OpenClaw Skill
Name: skylv-mcp-server-builder
Version: 1.0.3
The skill provides boilerplate code for building an MCP server, including tools for arbitrary file operations (read, write, delete) and SQL queries without input sanitization or path validation in SKILL.md. While these are presented as educational examples, the lack of security controls for high-risk capabilities like file system access and database execution constitutes a significant vulnerability (Path Traversal/SQL Injection) if deployed as-is.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (MCP server builder) matches the content: the SKILL.md scaffolds an MCP server, tools, and resources. However, the example toolset includes powerful capabilities (file read/write/delete, database queries) that expand scope beyond a minimal 'scaffolding' helper; those capabilities are plausible for a server builder but should be explicitly justified and surfaced in requirements.
Instruction Scope
The runtime instructions show example handlers that perform arbitrary filesystem operations and database access. Because SKILL.md is an instruction-only skill, it currently guides building a server that—if run—would allow models to read/write/list/delete arbitrary paths and run SQL. The document does not provide security controls, access restrictions, or guidance to limit these operations, which grants broad discretion and high risk if followed verbatim.
Install Mechanism
Instruction-only skill with no install spec and no code files executed by the platform. This minimizes immediate install-time risk (nothing is downloaded or executed by the platform).
Credentials
skill.json and SKILL.md declare no required env vars, yet the DB tool comments refer to process.env.DATABASE_URL and the examples implicitly require runtime access to the filesystem and any DB credentials. The absence of declared credentials or config expectations is under-specified and disproportionate to the sensitive capabilities shown.
Persistence & Privilege
No 'always: true' flag, no install steps, and no indication the skill modifies other skills or system-wide settings. Autonomous invocation is permitted (platform default) but not combined with other privilege escalations in the package metadata.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skylv-mcp-server-builder - After installation, invoke the skill by name or use
/skylv-mcp-server-builder - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Updated SKILL.md with a refined English description and improved trigger keywords.
- No functional or code changes; documentation and metadata only.
- Version number in SKILL.md updated from 1.0.1 to 1.0.2 for clarity and consistency.
v1.0.2
- Updated the skill version in SKILL.md from 1.0.0 to 1.0.1.
- No other changes to functionality or documentation content.
v1.0.1
- Added metadata fields: keywords and triggers in SKILL.md for improved searchability and activation.
- Included a new "Usage" section with basic installation and run steps.
- No changes to underlying code or core documentation content.
v1.0.0
- Initial release of mcp-server-builder (version 1.0.0)
- Provides a starter framework for building Model Context Protocol (MCP) servers with tools and resource definitions
- Includes detailed setup, tool/resource examples, CLI/test instructions, and deployment recommendations
- Focus on robust error handling, type safety with Zod, and best practices for MCP server development
Metadata
Frequently Asked Questions
What is Skylv Mcp Server Builder?
MCP (Model Context Protocol) 服务器开发助手。从零构建 MCP 服务器、工具、提示模板。触发词：mcp、服务器、协议、工具构建。 It is an AI Agent Skill for Claude Code / OpenClaw, with 157 downloads so far.
How do I install Skylv Mcp Server Builder?
Run "/install skylv-mcp-server-builder" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skylv Mcp Server Builder free?
Yes, Skylv Mcp Server Builder is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skylv Mcp Server Builder support?
Skylv Mcp Server Builder is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skylv Mcp Server Builder?
It is built and maintained by SKY-lv (@sky-lv); the current version is v1.0.3.
More Skills