Back to skill
Skillv1.0.0

VirusTotal security

mcdonalds-skill · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 6, 2026, 6:41 AM
Hash
7abc74a8c8570bf7b61317c433c010f09b615dd94fa076b51e3e1e44810ef1c8
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: mcdonalds-skill Version: 1.0.0 The skill is a legitimate-looking integration for the McDonald's MCP service (mcp.mcd.cn). The provided Python script (scripts/mcd_cli.py) is a clean implementation using only standard libraries to perform JSON-RPC 2.0 calls. It handles authentication securely via environment variables or CLI arguments, includes robust logic for fixing Chinese character encoding issues (mojibake), and lacks any indicators of data exfiltration, unauthorized execution, or prompt injection.
External report
View on VirusTotal