65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill mostly does what it claims (McDonald's MCP ordering) but its runtime instructions ask the agent to modify a user-level config file (~/.mcporter/mcporter.json) and to write into skill config ...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773231047271,
        "_id": "k970fnyzbqja8tqehkfzy8zyn582q48m",
        "changelog": "mcd-order-skill 1.0.0\n\n- 首发发布：实现麦当劳麦乐送点餐、菜单浏览、营养查询、活动日历和订单跟踪全流程\n- 支持「默认套餐」「按热量搭配」「自由选菜」多种点餐模式\n- 提供详细配置检测和环境引导，支持默认套餐首次引导及写入 personalized 配置\n- 支持自动生成支付二维码，订单状态实时跟踪及骑手位置反馈\n- 可查询餐品详细营养成分和当前门店优惠活动\n- 完善的错误处理，覆盖 Token、限速、配送范围、商品售罄等常见问题",
        "changelogSource": "user",
        "createdAt": 1773231047271,
        "parsed": {
            "clawdis": {
                "emoji": "🍔",
                "os": [
                    "darwin",
                    "linux",
                    "win32"
                ],
                "requires": {
                    "bins": [
                        "python3"
                    ],
                    "env": [
                        "MCD_MCP_TOKEN"
                    ]
                }
            }
        },
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "wujn",
        "handle": "wjn161",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/830629?v=4",
        "kind": "user",
        "linkedUserId": "kn78a8k16nakwbn3t772xmqqfs82p6sb"
    },
    "ownerHandle": "wjn161",
    "skill": {
        "_creationTime": 1773231047271,
        "_id": "kd77z5w8h3c89rad115ydad7n582phq0",
        "badges": [],
        "createdAt": 1773231047271,
        "displayName": "麦当劳点餐skill",
        "latestVersionId": "k970fnyzbqja8tqehkfzy8zyn582q48m",
        "ownerUserId": "kn78a8k16nakwbn3t772xmqqfs82p6sb",
        "slug": "mcd-order-skill",
        "stats": {
            "comments": 0,
            "downloads": 186,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "通过麦当劳官方 MCP 服务点麦乐送外卖。当用户说「帮我点麦当劳」「我想吃麦当劳」「麦当劳有什么好吃的」「查一下我的麦当劳订单」「麦当劳最近有什么活动」「这个汉堡多少卡路里」等时使用。支持麦乐送点餐全流程：浏览菜单、价格计算、创建订单、订单跟踪，以及营养信息查询和活动日历查询。",
        "tags": {
            "latest": "k970fnyzbqja8tqehkfzy8zyn582q48m"
        },
        "updatedAt": 1774331940444
    }
}