安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and instructions are consistent with an Outlook Calendar integration that uses MorphixAI as a proxy; it only asks for a Morphix API key and to install/link the Morphix plugin — verify those external pieces before granting access.
评估建议
This skill appears to do what it claims: control Outlook calendars via the MorphixAI proxy. Before installing or using it, verify that morphix.app and the openclaw-morphixai plugin are legitimate and trustworthy (check official docs, source code or publisher reputation). Understand that providing MORPHIXAI_API_KEY and linking your Outlook account gives that third party the ability to read, create, update, and delete events and to send invites on your behalf. Use a revocable/minimal-scoped API ke...详细分析 ▾
✓ 用途与能力
The name/description (Outlook calendar CRUD and queries) match the SKILL.md examples (mx_outlook_calendar actions). The only required environment variable is MORPHIXAI_API_KEY, which is appropriate for a proxy/service that mediates Microsoft Graph access. No unrelated binaries, config paths, or credentials are requested.
✓ 指令范围
The runtime instructions are scoped to calendar operations (list/create/update/delete events, calendar views, account linking). They instruct installing the external openclaw-morphixai plugin and linking an Outlook account via morphix.app or mx_link. The instructions do not ask the agent to read arbitrary files, harvest unrelated environment variables, or transmit data to unexpected endpoints beyond morphix.app/MorphixAI.
ℹ 安装机制
This is an instruction-only skill (no install spec, no code). However it directs the user to install an external plugin (openclaw-morphixai) and to visit morphix.app to create API keys and link accounts. Because those are external dependencies not bundled here, verify the authenticity and trustworthiness of the openclaw-morphixai plugin and morphix.app before installing or providing credentials.
✓ 凭证需求
Only MORPHIXAI_API_KEY is required, which is proportionate for a service proxy. Note: granting this key and linking an Outlook account will allow MorphixAI (and any component it authorizes) to read and modify calendar events, send invites, and access potentially sensitive scheduling data — this is expected but sensitive.
✓ 持久化与权限
The skill does not request always:true or system-level persistence. It uses the platform default for autonomous invocation (disable-model-invocation is false) which is normal. The skill does not request to modify other skills or system-wide settings.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.12026/3/5
- 增加了更详细的前置条件说明,包括插件安装、API Key 获取、环境变量配置和账号链接步骤。 - 新增相关外部链接,提升账号连接与密钥生成的指引清晰度。 - 其余功能与操作说明保持不变。
● 无害
安装命令 点击复制
官方npx clawhub@latest install outlook-calendar-2
镜像加速npx clawhub@latest install outlook-calendar-2 --registry https://cn.clawhub-mirror.com
技能文档
通过 mx_outlook_calendar 工具管理 Outlook 日历:查看日历列表、事件 CRUD、日期范围查询。
前置条件
- 安装插件:
openclaw plugins install openclaw-morphixai - 获取 API Key: 访问 morphix.app/api-keys 生成
mk_xxxxxx密钥 - 配置环境变量:
export MORPHIXAI_API_KEY="mk_your_key_here" - 链接账号: 访问 morphix.app/connections 链接 Outlook Calendar 账号,或通过
mx_link工具链接(app:microsoft_outlook_calendar)
核心操作
查看用户信息
mx_outlook_calendar:
action: get_me
列出日历
mx_outlook_calendar:
action: list_calendars
列出事件
mx_outlook_calendar:
action: list_events
top: 10
order_by: "start/dateTime desc"
按日期范围查看日程
mx_outlook_calendar:
action: get_calendar_view
start_date_time: "2026-03-01T00:00:00Z"
end_date_time: "2026-03-31T23:59:59Z"
top: 50
获取事件详情
mx_outlook_calendar:
action: get_event
event_id: "AAMkADxx..."
创建事件
mx_outlook_calendar:
action: create_event
subject: "项目评审会"
start: "2026-03-01T14:00:00"
end: "2026-03-01T15:30:00"
time_zone: "Asia/Shanghai"
body: "讨论 Q1 项目进展和 Q2 计划"
location: "会议室 A"
attendees:
- email: "colleague@company.com"
name: "张三"
type: "required"
- email: "manager@company.com"
type: "optional"
更新事件
mx_outlook_calendar:
action: update_event
event_id: "AAMkADxx..."
subject: "更新后的会议标题"
start: "2026-03-01T15:00:00"
end: "2026-03-01T16:00:00"
time_zone: "Asia/Shanghai"
删除事件
mx_outlook_calendar:
action: delete_event
event_id: "AAMkADxx..."
常见工作流
查看今日日程
1. mx_outlook_calendar: get_calendar_view,
start_date_time: "2026-02-25T00:00:00Z",
end_date_time: "2026-02-25T23:59:59Z"
安排会议
1. mx_outlook_calendar: get_calendar_view → 查看空闲时间
- mx_outlook_calendar: create_event → 创建会议,自动发送邀请
每周回顾
1. mx_outlook_calendar: get_calendar_view,
start_date_time: "本周一", end_date_time: "本周日"
- 汇总会议数量和时间分布
注意事项
- 日期时间格式为 ISO 8601(如
2026-03-01T10:00:00) time_zone使用 IANA 时区名(如Asia/Shanghai、America/New_York),默认UTCget_calendar_view按实际发生时间返回事件(展开重复事件)list_events返回原始事件定义(不展开重复事件)- 创建带参会者的事件会自动发送会议邀请邮件
calendar_id通常省略,使用默认日历account_id参数通常省略,工具自动检测已链接的 Outlook Calendar 账号
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制