安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions match the stated purpose (querying the OpenAI docs via an MCP server); it requests no secrets and has no install steps, though there are small metadata inconsistencies you should note before use.
评估建议
This skill is coherent and appears to do what it says: it queries an OpenAI MCP docs endpoint and returns content. Before installing: (1) verify you trust the MCP endpoint (default: https://developers.openai.com/mcp); do not set MCP_URL to an untrusted server because your queries (which may include sensitive content) would be sent there; (2) ensure curl and jq are available on the agent host (the script will fail otherwise) — the registry metadata omitted those required binaries; (3) review the ...详细分析 ▾
✓ 用途与能力
The name/description, SKILL.md, and the included script all implement the same capability: searching and fetching OpenAI developer docs via an MCP server. No unrelated services, credentials, or excessive capabilities are requested.
ℹ 指令范围
The runtime instructions are narrowly scoped to search/list/fetch docs via the provided CLI script. However, the script invokes curl and jq (and checks for them at runtime); the registry metadata listed no required binaries, which is a minor mismatch in the declared requirements.
✓ 安装机制
There is no install specification (instruction-only skill with a shipped script). Nothing is downloaded or executed from unknown remote URLs during install.
ℹ 凭证需求
The skill does not require credentials and only exposes an optional MCP_URL environment override. That is reasonable, but setting MCP_URL to an untrusted endpoint would redirect all queries (and their contents) to that server — users should only use the official endpoint or a trusted proxy.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills, and does not persist credentials or alter system-wide settings. It runs only when invoked.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/1/18
Initial release - Query OpenAI developer documentation via MCP server using CLI wrapper (curl/jq) for official API, SDK, and platform guidance
● 无害
安装命令 点击复制
官方npx clawhub@latest install openai-docs
镜像加速npx clawhub@latest install openai-docs --registry https://cn.clawhub-mirror.com
技能文档
Overview
Use the OpenAI developer documentation MCP server from the shell to search and fetch authoritative docs. Always do this for OpenAI platform work instead of relying on memory or non-official sources.
Core rules
- Always 使用 skill 对于 OpenAI API/SDK/Apps/Codex questions 或 当...时 precise, current docs 必填.
- 查询 MCP server 通过 CLI wrapper 在...中
scripts/openai-docs-mcp.sh(做 不 rely 在...上 Codex MCP tools). - 使用
搜索或列表到 查找 best doc page, 然后获取page (或 anchor) 对于 exact text. - Surface doc URL 您 used 在...中 响应 所以 sources 清除.
Quick 开始
scripts/openai-docs-mcp.sh search "Responses API" 5
scripts/openai-docs-mcp.sh fetch https://platform.openai.com/docs/guides/migrate-to-responses
Workflow
- Discover:
搜索带有 focused 查询. 如果 unsure, 使用列表到 browse. - 读取:
获取最多 relevant URL (optionally 添加 anchor). - Apply: summarize 和/或 quote relevant sections; include URL.
Script reference
The CLI wrapper is at scripts/openai-docs-mcp.sh and uses curl + jq against https://developers.openai.com/mcp.
Subcommands:
init: initialize 和 inspect server capabilities.tools: 列表 可用 tools 在...上 MCP server.搜索 <查询> [limit] [cursor]: return JSON hits 从 docs 索引.列表 [limit] [cursor]: browse docs 索引.获取: return markdown 对于 doc page 或 section.[anchor] endpoints: 列表 OpenAPI endpoints.openapi: 获取 OpenAPI schema 或 code samples.[lang1,lang2] [code-仅]
Environment:
MCP_URL: override 默认 MCP endpoint.
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制