ClawHub

DeepWiki

v1.0.0

Query the DeepWiki MCP server for GitHub repository documentation, wiki structure, and AI-powered questions.

⭐ 10· 6.7k·61 current·68 all-time
by@arun-8687
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill claims to query the DeepWiki MCP server for repository documentation and the included script implements exactly that (SSE -> receive endpoint -> POST JSON-RPC). No unrelated binaries, env vars, or config paths are requested.
ℹ
Instruction Scope
The SKILL.md instructs running the included Node script. The script only reads command-line args and network I/O to https://mcp.deepwiki.com (SSE and POST). It does not read files, environment variables, or other system state. However, any question text and repo name you pass will be transmitted to the remote service — so this skill sends user-provided data externally as intended.
✓
Install Mechanism
No install spec; the skill is instruction-only with a small embedded script. Nothing is downloaded or written during install, minimizing install-time risk.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. That is proportionate to its stated purpose. Be aware that the runtime will transmit input strings (repo and question/path) to the remote server.
✓
Persistence & Privilege
The skill does not request persistent presence (always: false) and does not modify other skills or system configurations. It runs only when invoked.
Assessment
This skill is coherent and small, but it contacts an external host (mcp.deepwiki.com) and will transmit whatever repo names and question text you provide. Do not use it with private or sensitive repository names, secrets, or policy-sensitive queries unless you trust the DeepWiki service and its privacy policy. If you need greater assurance, review the upstream project or service (the provided homepage) and consider running the script in a network-restricted environment or with a proxy so you can audit outbound traffic.

Like a lobster shell, security has layers — review code before you run it.

latestvk975a0jza9ymdcr4e499wb3n4x7z14hs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments