Mcporter

Use the mcporter CLI to list, configure, auth, and call MCP servers/tools directly (HTTP or stdio), including ad-hoc servers, config edits, and CLI/type generation.

Install this only if you want an agent to use mcporter for direct MCP operations. Treat `mcporter call`, OAuth, config edits, daemon commands, and `--stdio` commands as sensitive: review the target server or command first, avoid production credentials unless needed, and prefer explicit user approval before running commands that can modify data or start local processes.

Type: OpenClaw Skill Name: mcporter Version: 1.0.0 The skill is classified as suspicious due to its broad capabilities, particularly the explicit instruction for `mcporter call --stdio "bun run ./server.ts"` in `SKILL.md`. This demonstrates and enables the execution of arbitrary commands, which is a significant security risk, even though the example command itself is benign. Additionally, the skill allows for arbitrary HTTP calls (`mcporter call <url>`), configuration edits, and daemon management, granting extensive system and network access. While these capabilities might be plausible for the stated purpose of a CLI tool, they represent high-risk behaviors without clear malicious intent from the skill bundle itself.