← Back to Skills Marketplace
143
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install motion-agent
Description
Use this skill when the user pastes a Motion invite URL (contains /invite/ or /agent/), asks to "edit a Motion document", "connect to Motion", "collaborate o...
Usage Guidance
This skill appears to perform Motion-like document editing, but it instructs the agent to send agent tokens (which grant full workspace access) or invite tokens to https://motion-mcp-server.fly.dev — an unverified third-party host. Before installing or using it:
- Do not paste or provide real agent_tokens or invite URLs unless you trust the host. Treat tokens as highly sensitive.
- Ask the skill author to confirm the ownership of motion-mcp-server.fly.dev and to provide a canonical official API endpoint (e.g., a Motion-owned domain) or endorsement.
- Prefer skills that call the official Motion API or that let you self-host the proxy inside your org.
- If you must test, use throwaway or least-privilege tokens and rotate/revoke them after testing. Monitor audit logs for unexpected activity.
If the maintainer demonstrates that motion-mcp-server.fly.dev is an official Motion service or a trusted, org-owned proxy, this assessment could change to benign; otherwise treat it as a potential token-exfiltration risk.
Capability Analysis
Type: OpenClaw Skill
Name: motion-agent
Version: 1.0.3
The motion-agent skill is a legitimate integration for a collaborative document editing service (Motion) via an MCP server hosted on fly.dev. The bundle contains comprehensive documentation (SKILL.md, api-reference.md) for document manipulation, page management, and commenting. While it handles sensitive workspace-wide 'agent tokens,' this is transparently documented as the primary authentication method for its stated purpose. The skill includes safety-oriented instructions, such as defaulting to 'suggestion mode' to allow human review of AI edits, and lacks any indicators of malicious intent, obfuscation, or unauthorized data exfiltration.
Capability Assessment
Purpose & Capability
Name/description (Motion document editing) align with the provided API and examples, but all HTTP calls point to https://motion-mcp-server.fly.dev — not an obvious official Motion domain. Using a third-party host as the API endpoint is disproportionate to the stated purpose unless the host is explicitly owned/endorsed by Motion or the user's org.
Instruction Scope
SKILL.md explicitly instructs the agent to POST agent_token (workspace-wide, full-access) or invite_token to the listed BASE URL to create sessions and connect to documents. The instructions do not reference unrelated files or env vars, but they do direct transmission of highly sensitive tokens to an external service under the skill's control, creating an exfiltration risk.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes on-disk risk (no arbitrary binary downloads), but network calls still occur when the agent follows the instructions.
Credentials
The skill does not declare required env vars, but it requires the user/agent to provide agent_token or invite_token at runtime. Those tokens grant broad workspace access; sending them to the skill's specified host is not proportionate without proof the host is legitimate/trusted. The skill requests no other unrelated credentials.
Persistence & Privilege
always is false and the skill does not request persistent system privileges. It does allow normal autonomous invocation (platform default) but that alone is not flagged; combined with the instructions to transmit tokens to a third-party host increases risk.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install motion-agent - After installation, invoke the skill by name or use
/motion-agent - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
**Added support for agent tokens and improved workspace-level access.**
- Introduced agent token authentication, enabling workspace-wide access and easier automation.
- Updated skill trigger to recognize both /invite/ and /agent/ URLs and agent_token in addition to invite_token.
- Added new recommended workflow: workspace-first session with the ability to connect to documents later.
- Listed new API options, including auto-connect when creating a page.
- Described enhanced security model: workspace boundary enforcement and agent token revocation.
- Legacy invite token approach is now considered secondary.
v1.0.2
- Added documentation for the optional "mode" field on all edit endpoints, clarifying `"suggest"` (default) and `"direct"` edit modes.
- No functional/API changes; documentation updated to better explain suggestion and direct modes for edits.
v1.0.1
**Adds workspace-level session support and improves workspace management**
- Introduced workspace-only session mode (connect with just an invite token, no document required)
- New endpoints for listing, creating, renaming, deleting, restoring, and moving pages/folders at the workspace level
- Added support for connecting to (or switching) a document within an existing session
- Clarified which endpoints/capabilities are available with or without a document connection
- Updated skill triggers and documentation to reflect new workspace and page management features
v1.0.0
motion-agent 1.0.0
- Initial release providing real-time collaborative editing for Motion documents.
- Supports connection and live editing via Motion invite URLs.
- Includes robust suggestion (review) mode and direct editing capabilities.
- Offers full document, page, comment, version history, and export management.
- Provides a detailed workflow and API endpoint reference for all supported operations.
- Agent appears alongside human collaborators and clearly identifies its edits and suggestions.
Metadata
Frequently Asked Questions
What is Motion Skill?
Use this skill when the user pastes a Motion invite URL (contains /invite/ or /agent/), asks to "edit a Motion document", "connect to Motion", "collaborate o... It is an AI Agent Skill for Claude Code / OpenClaw, with 143 downloads so far.
How do I install Motion Skill?
Run "/install motion-agent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Motion Skill free?
Yes, Motion Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Motion Skill support?
Motion Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Motion Skill?
It is built and maintained by auditt98 (@auditt98); the current version is v1.0.3.
More Skills