← 返回 Skills 市场
sky-lv

Skylv Mcp Server Builder

作者 SKY-lv · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
157
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install skylv-mcp-server-builder
功能描述
MCP (Model Context Protocol) 服务器开发助手。从零构建 MCP 服务器、工具、提示模板。触发词:mcp、服务器、协议、工具构建。
安全使用建议
This skill is a tutorial/scaffold for building an MCP server and includes example tools that can read/write arbitrary files and run database queries. That makes it potentially dangerous if you run the generated server without safeguards. Before using: review and harden any generated code (remove or restrict file_operations and database_query handlers), require explicit authentication/authorization for tool calls, avoid running on hosts containing sensitive data or as root, provide and document needed environment variables (e.g., DATABASE_URL) rather than leaving them implicit, and restrict tool input validation and allowed paths. Because the package is instruction-only (no install), the immediate platform risk is low—but follow the cautions above before building or deploying any server produced from these instructions.
功能分析
Type: OpenClaw Skill Name: skylv-mcp-server-builder Version: 1.0.3 The skill provides boilerplate code for building an MCP server, including tools for arbitrary file operations (read, write, delete) and SQL queries without input sanitization or path validation in SKILL.md. While these are presented as educational examples, the lack of security controls for high-risk capabilities like file system access and database execution constitutes a significant vulnerability (Path Traversal/SQL Injection) if deployed as-is.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The name/description (MCP server builder) matches the content: the SKILL.md scaffolds an MCP server, tools, and resources. However, the example toolset includes powerful capabilities (file read/write/delete, database queries) that expand scope beyond a minimal 'scaffolding' helper; those capabilities are plausible for a server builder but should be explicitly justified and surfaced in requirements.
Instruction Scope
The runtime instructions show example handlers that perform arbitrary filesystem operations and database access. Because SKILL.md is an instruction-only skill, it currently guides building a server that—if run—would allow models to read/write/list/delete arbitrary paths and run SQL. The document does not provide security controls, access restrictions, or guidance to limit these operations, which grants broad discretion and high risk if followed verbatim.
Install Mechanism
Instruction-only skill with no install spec and no code files executed by the platform. This minimizes immediate install-time risk (nothing is downloaded or executed by the platform).
Credentials
skill.json and SKILL.md declare no required env vars, yet the DB tool comments refer to process.env.DATABASE_URL and the examples implicitly require runtime access to the filesystem and any DB credentials. The absence of declared credentials or config expectations is under-specified and disproportionate to the sensitive capabilities shown.
Persistence & Privilege
No 'always: true' flag, no install steps, and no indication the skill modifies other skills or system-wide settings. Autonomous invocation is permitted (platform default) but not combined with other privilege escalations in the package metadata.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install skylv-mcp-server-builder
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /skylv-mcp-server-builder 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
- Updated SKILL.md with a refined English description and improved trigger keywords. - No functional or code changes; documentation and metadata only. - Version number in SKILL.md updated from 1.0.1 to 1.0.2 for clarity and consistency.
v1.0.2
- Updated the skill version in SKILL.md from 1.0.0 to 1.0.1. - No other changes to functionality or documentation content.
v1.0.1
- Added metadata fields: keywords and triggers in SKILL.md for improved searchability and activation. - Included a new "Usage" section with basic installation and run steps. - No changes to underlying code or core documentation content.
v1.0.0
- Initial release of mcp-server-builder (version 1.0.0) - Provides a starter framework for building Model Context Protocol (MCP) servers with tools and resource definitions - Includes detailed setup, tool/resource examples, CLI/test instructions, and deployment recommendations - Focus on robust error handling, type safety with Zod, and best practices for MCP server development
元数据
Slug skylv-mcp-server-builder
版本 1.0.3
许可证 MIT-0
累计安装 1
当前安装数 0
历史版本数 4
常见问题

Skylv Mcp Server Builder 是什么?

MCP (Model Context Protocol) 服务器开发助手。从零构建 MCP 服务器、工具、提示模板。触发词:mcp、服务器、协议、工具构建。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 157 次。

如何安装 Skylv Mcp Server Builder?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install skylv-mcp-server-builder」即可一键安装,无需额外配置。

Skylv Mcp Server Builder 是免费的吗?

是的,Skylv Mcp Server Builder 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Skylv Mcp Server Builder 支持哪些平台?

Skylv Mcp Server Builder 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Skylv Mcp Server Builder?

由 SKY-lv(@sky-lv)开发并维护,当前版本 v1.0.3。

💬 留言讨论