moegirlpedia-mediawiki-api

经过身份认证访问萌娘百科（Moegirlpedia）的 MediaWiki API，用于页面搜索、解析 wikitext、获取页面内容、分类、分类前缀匹配、分类成员、页面摘要、当前用户权限、监视列表简报及最近更改简报。萌娘百科的大部分 API 要求登录后才可使用。当 OpenClaw 需要获取萌娘百科数据时，请使...

This skill appears to be what it says: an authenticated client for Moegirlpedia's MediaWiki API. If you install it, you will give it a bot password that can read data tied to that account (and, depending on permissions, view the user's watchlist). Follow the SKILL.md advice: create a dedicated bot-password (not your main password), grant only the minimum permissions needed, consider IP restrictions and a narrow "allowed pages" scope, and rotate the bot-password regularly. If you want extra assurance, review the bundled dist/index.js or verify the upstream GitHub repository before use (the registry's Source field is listed as unknown even though the SKILL.md/package.json point to GitHub).

Type: OpenClaw Skill Name: moegirlpedia-mediawiki-api Version: 0.7.0 The skill provides a legitimate interface for interacting with the Moegirlpedia MediaWiki API. It supports authenticated operations such as searching, fetching page content, and summarizing recent changes or watchlists. The code (dist/index.js) correctly handles sensitive credentials (MOEGIRLPEDIA_BOT_PASSWORD) by using them only for authentication against the official Moegirlpedia endpoint (mzh.moegirl.org.cn). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the instructions in SKILL.md regarding password rotation reminders are consistent with secure bot management practices.