← 返回 Skills 市场
143
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install motion-agent
功能描述
Use this skill when the user pastes a Motion invite URL (contains /invite/ or /agent/), asks to "edit a Motion document", "connect to Motion", "collaborate o...
安全使用建议
This skill appears to perform Motion-like document editing, but it instructs the agent to send agent tokens (which grant full workspace access) or invite tokens to https://motion-mcp-server.fly.dev — an unverified third-party host. Before installing or using it:
- Do not paste or provide real agent_tokens or invite URLs unless you trust the host. Treat tokens as highly sensitive.
- Ask the skill author to confirm the ownership of motion-mcp-server.fly.dev and to provide a canonical official API endpoint (e.g., a Motion-owned domain) or endorsement.
- Prefer skills that call the official Motion API or that let you self-host the proxy inside your org.
- If you must test, use throwaway or least-privilege tokens and rotate/revoke them after testing. Monitor audit logs for unexpected activity.
If the maintainer demonstrates that motion-mcp-server.fly.dev is an official Motion service or a trusted, org-owned proxy, this assessment could change to benign; otherwise treat it as a potential token-exfiltration risk.
功能分析
Type: OpenClaw Skill
Name: motion-agent
Version: 1.0.3
The motion-agent skill is a legitimate integration for a collaborative document editing service (Motion) via an MCP server hosted on fly.dev. The bundle contains comprehensive documentation (SKILL.md, api-reference.md) for document manipulation, page management, and commenting. While it handles sensitive workspace-wide 'agent tokens,' this is transparently documented as the primary authentication method for its stated purpose. The skill includes safety-oriented instructions, such as defaulting to 'suggestion mode' to allow human review of AI edits, and lacks any indicators of malicious intent, obfuscation, or unauthorized data exfiltration.
能力评估
Purpose & Capability
Name/description (Motion document editing) align with the provided API and examples, but all HTTP calls point to https://motion-mcp-server.fly.dev — not an obvious official Motion domain. Using a third-party host as the API endpoint is disproportionate to the stated purpose unless the host is explicitly owned/endorsed by Motion or the user's org.
Instruction Scope
SKILL.md explicitly instructs the agent to POST agent_token (workspace-wide, full-access) or invite_token to the listed BASE URL to create sessions and connect to documents. The instructions do not reference unrelated files or env vars, but they do direct transmission of highly sensitive tokens to an external service under the skill's control, creating an exfiltration risk.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes on-disk risk (no arbitrary binary downloads), but network calls still occur when the agent follows the instructions.
Credentials
The skill does not declare required env vars, but it requires the user/agent to provide agent_token or invite_token at runtime. Those tokens grant broad workspace access; sending them to the skill's specified host is not proportionate without proof the host is legitimate/trusted. The skill requests no other unrelated credentials.
Persistence & Privilege
always is false and the skill does not request persistent system privileges. It does allow normal autonomous invocation (platform default) but that alone is not flagged; combined with the instructions to transmit tokens to a third-party host increases risk.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install motion-agent - 安装完成后，直接呼叫该 Skill 的名称或使用
/motion-agent触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
**Added support for agent tokens and improved workspace-level access.**
- Introduced agent token authentication, enabling workspace-wide access and easier automation.
- Updated skill trigger to recognize both /invite/ and /agent/ URLs and agent_token in addition to invite_token.
- Added new recommended workflow: workspace-first session with the ability to connect to documents later.
- Listed new API options, including auto-connect when creating a page.
- Described enhanced security model: workspace boundary enforcement and agent token revocation.
- Legacy invite token approach is now considered secondary.
v1.0.2
- Added documentation for the optional "mode" field on all edit endpoints, clarifying `"suggest"` (default) and `"direct"` edit modes.
- No functional/API changes; documentation updated to better explain suggestion and direct modes for edits.
v1.0.1
**Adds workspace-level session support and improves workspace management**
- Introduced workspace-only session mode (connect with just an invite token, no document required)
- New endpoints for listing, creating, renaming, deleting, restoring, and moving pages/folders at the workspace level
- Added support for connecting to (or switching) a document within an existing session
- Clarified which endpoints/capabilities are available with or without a document connection
- Updated skill triggers and documentation to reflect new workspace and page management features
v1.0.0
motion-agent 1.0.0
- Initial release providing real-time collaborative editing for Motion documents.
- Supports connection and live editing via Motion invite URLs.
- Includes robust suggestion (review) mode and direct editing capabilities.
- Offers full document, page, comment, version history, and export management.
- Provides a detailed workflow and API endpoint reference for all supported operations.
- Agent appears alongside human collaborators and clearly identifies its edits and suggestions.
元数据
常见问题
Motion Skill 是什么？
Use this skill when the user pastes a Motion invite URL (contains /invite/ or /agent/), asks to "edit a Motion document", "connect to Motion", "collaborate o... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 143 次。
如何安装 Motion Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install motion-agent」即可一键安装，无需额外配置。
Motion Skill 是免费的吗？
是的，Motion Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Motion Skill 支持哪些平台？
Motion Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Motion Skill？
由 auditt98（@auditt98）开发并维护，当前版本 v1.0.3。
推荐 Skills