← 返回 Skills 市场
307
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install mx-link
功能描述
通过 MorphixAI 统一链接和管理第三方账号（GitHub、GitLab、Gmail、Outlook、Jira、Slack 等），并通过代理安全调用第三方 API。
安全使用建议
Before installing or enabling this skill, verify the MorphixAI service and the openclaw-morphixai plugin are legitimate and trustworthy. Ask the publisher: why does the OAuth connect link point to a pipedream.com static URL instead of morphix.app? Confirm where OAuth tokens and authorization codes are routed and stored. Avoid giving the MORPHIXAI_API_KEY 'all scopes' unless you understand and accept the full permissions; prefer creating a key with minimal required scopes. Prefer dedicated platform skills (the SKILL.md itself advises this) rather than the proxy path for platforms that have first‑class integrations. If you must use this skill, limit the API key scope, review the openclaw-morphixai plugin code/manifest (or vendor) to see how requests are proxied and where credentials are stored, and monitor proxy usage for unexpected destinations or exfiltration patterns.
功能分析
Type: OpenClaw Skill
Name: mx-link
Version: 0.1.1
The 'office-link' skill (mx-link) is a management interface for the MorphixAI service, designed to link third-party accounts (GitHub, Slack, etc.) and proxy API requests. The instructions in SKILL.md are well-structured, providing clear guidance for the AI agent to prioritize dedicated skills and use the proxy action only as a fallback. It uses standard OAuth connection flows via Pipedream and requires a user-provided API key, with no evidence of malicious intent, data exfiltration, or deceptive prompt injection.
能力评估
Purpose & Capability
The skill claims to mediate and proxy third‑party API calls via MorphixAI and only requires a single MORPHIXAI_API_KEY env var, which is proportionate. It also tells users to install an external plugin (openclaw-morphixai) — reasonable but the skill doesn't include that plugin or an install spec, so availability is assumed. Overall capability requested aligns with the described purpose, but some implementation choices (see instruction scope) are unexpected.
Instruction Scope
SKILL.md instructs the agent to create OAuth connect links and to use a generic proxy action that can hit arbitrary third‑party endpoints using linked accounts. It also shows the returned OAuth link hosted at a pipedream.com static URL (https://pipedream.com/_static/connect.html?...), which is not the morphix.app domain described elsewhere — this is an incoherence that could mean OAuth redirects or tokens flow through a third party. The doc also tells users to 'select all scopes' when creating the API key, which requests broad privileges without justification. The proxy design (free‑form URL, method, body) can be used to call arbitrary endpoints — expected for a general proxy but increases risk of unintended data exposure or misuse.
Install Mechanism
No install spec and no code files (instruction-only). That reduces local attack surface because nothing is written/executed on the user's host by the skill itself. However, the SKILL.md depends on an external plugin (openclaw-morphixai) and an external service (morphix.app) which are outside this package — the skill assumes those are present.
Credentials
Only MORPHIXAI_API_KEY is required, which matches the described architecture. However, the instructions explicitly tell users to create an API key with all scopes selected, which is broader than necessary to 'list accounts' and 'proxy calls' and increases blast radius if the key is compromised. The doc also suggests storing the key in config files (~/.openclaw/.env or openclaw.json) — normal but worth guarding. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request always: true and does not try to modify other skills or system settings. It allows normal autonomous invocation (disable-model-invocation: false), which is the platform default and not in itself a concern. No additional persistent privileges are requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mx-link - 安装完成后，直接呼叫该 Skill 的名称或使用
/mx-link触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
**mx-link v0.1.1**
- 新增「前置条件」说明，包含插件安装、API Key 获取/配置、账号管理入口，提升新手使用友好性
- 环境变量和 openclaw.json 配置示例更新，更贴合新版 MorphixAI 插件结构（`morphix.apiKey`）
- 简化安装和账号链接流程，推荐使用 MorphixAI 控制台统一管理连接
- 文档结构微调，突出专用 skill 优先原则和操作指导
v0.1.0
office-link 0.1.0 初始版本发布
- 支持统一管理和链接多种第三方账号（GitHub、GitLab、Gmail、Outlook、Jira、Slack、Notion、Google Sheets、等）。
- 通过代理安全调用第三方 API，Bot 不直接持有 OAuth token，所有请求经 MorphixAI 服务端中转。
- 明确要求：如有专用 skill，必须优先使用专用 skill，proxy 仅作兜底调用无专用 skill 的平台。
- 支持自动查已链接账号、引导 OAuth 链接、统一调用和参数格式。
- 支持 40+ 平台账号接入和操作流程。
- 详细说明授权、proxy 调用方法，以及常见错误和配置方式。
元数据
常见问题
Office Link 是什么？
通过 MorphixAI 统一链接和管理第三方账号（GitHub、GitLab、Gmail、Outlook、Jira、Slack 等），并通过代理安全调用第三方 API。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 307 次。
如何安装 Office Link？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mx-link」即可一键安装，无需额外配置。
Office Link 是免费的吗？
是的，Office Link 完全免费（开源免费），可自由下载、安装和使用。
Office Link 支持哪些平台？
Office Link 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Office Link？
由 Paul Leo（@paul-leo）开发并维护，当前版本 v0.1.1。
推荐 Skills