📦 McDonald’s MCP Service — 麦当劳全链服务
v1.0.0一站式接入麦当劳官方 MCP 服务，实现点餐、领券、积分兑换等全流程自动化，开发者只需在 open.mcd.cn 获取 MCP Token 即可快速集成，无需自建后端。
0· 227·0 当前·0 累计
by @jessiondai下载技能包
最后更新
2026/3/18
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: call McDonald's MCP HTTP APIs using a user-supplied MCP Token. Before installing, consider: (1) only provide a token obtained from the official open.mcd.cn console; (2) prefer supplying the token securely (environment variable or secret store) rather than as a CLI argument to avoid exposure in process lists; (3) review the included scripts yourself if you are concerned about network requests—they call only https://mcp.mcd.cn endpoints; (4) avoid giving broa...详细分析 ▾
ℹ 用途与能力
Name/description promise MCP integration and the included script + SKILL.md implement exactly that. Minor inconsistency: the skill requires an MCP Token at runtime (per SKILL.md and the CLI script) but the registry metadata does not declare any required env var or primary credential.
✓ 指令范围
SKILL.md instructs only HTTP POSTs to the documented MCP base URL and to provide the MCP Token; it does not ask the agent to read unrelated files, secrets, or send data to other endpoints.
✓ 安装机制
No install spec or external downloads. The package is instruction-only plus a small included Node.js script; nothing is written to disk by an installer during install-time.
ℹ 凭证需求
The only secret the skill needs is the MCP Token, which is proportionate to the purpose. However, that credential is not declared in the skill metadata (primaryEnv/required env), and the provided script expects the token as a CLI argument (which can leak in process lists).
✓ 持久化与权限
always is false, no config paths or system-wide changes are requested, and the skill does not attempt to persist or modify other skills or agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/18
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install mcdonalds-mcp
镜像加速npx clawhub@latest install mcdonalds-mcp --registry https://cn.longxiaskill.com