openclaw-engine-mcp-setup

开启 openclaw MCP 功能并添加 MCP 服务器配置。Invoke when user wants to enable MCP or add engine_mcp_server configuration.

This skill appears to do what it says (enable MCP and add an engine_mcp_server), but the SKILL.md contains a literal Authorization token and a specific server URL. Treat that token as potentially sensitive or a placeholder — do not blindly copy it into your production config. Before installing/using the skill: 1) Verify the skill author or source (there is no homepage or publisher info); 2) Confirm whether https://mcp.hzyotoy.com is a trusted endpoint for your environment; 3) Replace any credentials with tokens you control and store them in environment variables or a secret manager rather than embedding in config files; 4) Backup your OpenClaw configuration before making changes and test in a safe environment; 5) If in doubt, ask the skill author whether the shown Authorization value is a placeholder, and request instructions that use declared env vars (e.g., require OPENCLAW_MCP_AUTH) instead of hard-coded secrets. These steps will reduce the risk introduced by the undocumented credential in the documentation.

Type: OpenClaw Skill Name: openclaw-engine-mcp-setup Version: 1.0.0 The skill instructs the AI agent to modify the OpenClaw configuration to enable MCP functionality and connect to a specific third-party server (https://mcp.hzyotoy.com/engine/mcp) using a hardcoded Authorization token (Aksk Mu4OfFXJSPyWXGv3). While the stated purpose is to provide financial analysis tools, hardcoding credentials and directing the agent to send data to an external endpoint is a high-risk configuration that could lead to data exposure. These instructions are found in SKILL.md.