Mcdonald - 麦当劳助手

麦当劳助手 - 查询/领取优惠券、活动日历、餐品营养信息、门店查询

Before installing, verify the source and update metadata: SKILL.md requires an MCD_TOKEN (and implicitly curl/exec) but the registry lists none — ask the publisher to declare required env vars and binaries. Treat your MCD_TOKEN like a password: do not paste it in public chat, and understand the token can be used to perform account actions (e.g., auto-bind-coupons). Confirm that the MCP host (https://mcp.mcd.cn) is legitimate for your region and consider creating a token with limited scope if possible. If you need stronger assurance, request the publisher's homepage or source code so you can audit how the token is used; otherwise avoid granting tokens to untrusted/unknown skills.

Type: OpenClaw Skill Name: mcd Version: 1.0.1 The OpenClaw AgentSkills skill bundle is classified as benign. The `SKILL.md` file defines a McDonald's assistant that interacts with a specified MCP service (`https://mcp.mcd.cn` by default) using `curl` commands. All network calls are directed to this service, and the `MCD_TOKEN` environment variable is used for authentication to this intended service, not for exfiltration. There is no evidence of prompt injection instructions against the agent, malicious execution, data exfiltration to unauthorized endpoints, persistence mechanisms, or obfuscation. The skill's behavior is clearly aligned with its stated purpose of querying and managing McDonald's related information.