← 返回 Skills 市场
hi-yu

mcd-cn

作者 hiyu · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1268
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mcdonald-cn
功能描述
麦当劳助手 - 查询/领取优惠券、活动日历、餐品营养信息、门店查询
安全使用建议
This skill appears to do what it says (call McDonald's MCP API) but has two issues you should consider before installing: (1) SKILL.md requires you to provide an MCD_TOKEN for your account, yet the registry metadata did not declare any required env vars — confirm with the publisher why the registry omits this. (2) The 'auto-bind-coupons' tool is state-changing and will perform actions in your account if the skill is allowed to run; do not enable autonomous execution of state-changing commands without explicit user consent. Additional recommendations: only provide the minimum-scoped token the service supports (avoid sharing full-account credentials), verify the MCP endpoint (https://mcp.mcd.cn) is legitimate, avoid pasting the token into public chats, consider requiring manual confirmation for coupon-claiming operations, and be mindful of rate limits and privacy implications.
功能分析
Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill is classified as benign. It uses `curl` commands to interact with a McDonald's MCP service (`mcp.mcd.cn`) for its stated purpose of querying coupons, activities, and nutrition information. It requires an `MCD_TOKEN` for authentication, which is handled via an environment variable, and explicitly warns against exposing it. While it performs network requests and uses a sensitive token, these actions are clearly aligned with the skill's functionality and there is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence, or prompt injection attempts against the agent in SKILL.md.
能力评估
Purpose & Capability
The name/description (McDonald's helper: coupons, calendar, nutrition, store lookup) aligns with the operations in SKILL.md (curl calls to mcp.mcd.cn). However, the registry metadata reported 'Required env vars: none' while the SKILL.md requires an API token (MCD_TOKEN); that mismatch is unexpected and should be explained.
Instruction Scope
Instructions are explicit and limited to POSTing JSON-RPC calls to the MCP endpoint (mcp.mcd.cn) via curl and parsing responses. They do not instruct reading unrelated files or system state. One action (auto-bind-coupons) is state-changing (will attempt to claim coupons into the user account) — this is within the described domain but requires explicit user consent because it performs account actions.
Install Mechanism
No install spec and no code files are provided (instruction-only). This minimizes on-disk risk; the skill relies on curl being available at runtime.
Credentials
The SKILL.md requires an API credential (MCD_TOKEN) and an optional MCD_MCP_URL, which are proportionate to the stated purpose. However, the skill registry metadata claims no required environment variables — that inconsistency is concerning because a required credential is not declared in the registry. Users should be warned before supplying tokens.
Persistence & Privilege
The skill does not request permanent/always-on presence and does not modify other skills or system-wide settings. Autonomous invocation is permitted by default but not combined with other privilege escalations here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mcdonald-cn
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mcdonald-cn 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release. - Supports querying and claiming McDonald's coupons. - View event calendars and recent promotions. - Access nutrition information for menu items. - Assist in composing meal sets based on calorie goals. - Store locator functionality.
元数据
Slug mcdonald-cn
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

mcd-cn 是什么?

麦当劳助手 - 查询/领取优惠券、活动日历、餐品营养信息、门店查询. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1268 次。

如何安装 mcd-cn?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mcdonald-cn」即可一键安装,无需额外配置。

mcd-cn 是免费的吗?

是的,mcd-cn 完全免费(开源免费),可自由下载、安装和使用。

mcd-cn 支持哪些平台?

mcd-cn 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 mcd-cn?

由 hiyu(@hi-yu)开发并维护,当前版本 v1.0.0。

💬 留言讨论