麦当劳点餐skill

通过麦当劳官方 MCP 服务点麦乐送外卖。当用户说「帮我点麦当劳」「我想吃麦当劳」「麦当劳有什么好吃的」「查一下我的麦当劳订单」「麦当劳最近有什么活动」「这个汉堡多少卡路里」等时使用。支持麦乐送点餐全流程：浏览菜单、价格计算、创建订单、订单跟踪，以及营养信息查询和活动日历查询。

This skill appears to implement McDonald's ordering via the official MCP API and uses a single token (MCD_MCP_TOKEN) and bundled Python helper scripts. Before installing: 1) Verify you trust the skill source — it will run the included Python script and may write to ~/.mcporter/mcporter.json and to the skill's config.json. 2) Do not store your primary or high-privilege credentials in world-readable files; use a dedicated token for this skill if possible. 3) If you prefer control, manually register the MCP server entry in ~/.mcporter/mcporter.json instead of allowing the skill to write it. 4) Inspect scripts/order_helper.py yourself (it’s included) to confirm there are no unexpected network endpoints or exfiltration steps (the script we reviewed only parses data, formats summaries, generates QR codes, and expects MCP data). 5) Because the skill modifies a user-level config file not declared in the manifest, proceed with caution — if you are unsure, choose not to install or run it in a restricted/test environment first.

Type: OpenClaw Skill Name: mcd-order-skill Version: 1.0.0 The skill bundle is a well-structured tool for ordering McDonald's via a dedicated MCP service (mcp.mcd.cn). It includes a Python helper script (order_helper.py) for formatting order summaries, calculating calorie-based meal pairings, and generating payment QR codes. The instructions in SKILL.md correctly guide the agent through a multi-step ordering process, including environment configuration and token validation, without any evidence of data exfiltration, malicious execution, or harmful prompt injection.