Product
v1.0.0AI Agents Skills - Query product catalog from fore.vip platform via MCP Server. Browse AI products, activities, events, and more. Compatible with OpenClaw, H...
⭐ 0· 93·0 current·0 all-time
byFore.vip@onsoul
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (product catalog query for fore.vip via MCP) matches the manifest and SKILL.md. No binaries, secrets, or unrelated services are requested. All declared endpoints and examples are consistent with a product-query skill.
Instruction Scope
Runtime instructions restrict the agent to collecting query parameters, validating them, and calling fore.vip MCP endpoints. The SKILL.md includes example cloud-function snippets and a guidance to parse request bodies (this.getHttpInfo().body + JSON.parse), which is expected for MCP integration. One documentation file (SKILL_cn.md) also lists absolute local developer paths (/Users/codes/...), which is an extraneous doc artifact but does not instruct the agent to read local files or secrets.
Install Mechanism
No install spec is provided (instruction-only skill), which is low risk. The repository includes a test_local.sh that runs curl against https://api.fore.vip — a benign network test. No external downloads, package installs, or extract operations are present.
Credentials
The skill declares no required environment variables or credentials, which aligns with the documented unauthenticated examples. Note: documentation mentions potential 'Authentication errors (OpenClaw & Hub)'; if the MCP endpoints require platform-specific auth in your deployment, the skill does not declare or request those credentials — you should confirm how your platform will provide any needed tokens and that you are comfortable granting them.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-level changes. It does not modify other skills' configurations or request system-wide credentials.
Assessment
This skill is coherent and primarily documents how to call https://api.fore.vip/mcp endpoints to list and paginate products. Before installing: 1) Confirm you trust api.fore.vip (network calls will be made to that host). 2) Verify whether your MCP/OpenClaw deployment requires authentication — if so, understand how tokens are supplied (the skill does not request credentials itself). 3) Review the small test_local.sh if you plan to run it locally (it performs curl requests to the public API). 4) The docs include a stray local path reference (development artifact) — harmless but worth noting. If you need the agent to avoid contacting external URLs automatically, restrict autonomous invocation or network access in your agent runtime.Like a lobster shell, security has layers — review code before you run it.
latestvk97a76q9xbj8dyynf1q3tbe01x83dnx9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.