My Mcdonald

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent McDonald’s helper, but it uses a bearer token and command-line web calls to read or claim coupons through an external MCP service.

Install only if you are comfortable giving the agent a McDonald’s MCP token. Keep the token private, use the trusted endpoint, and require clear confirmation before allowing one-click coupon claiming.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI03: Identity and Privilege Abuse

What this means

If configured, the agent can use your McDonald’s MCP token to view account coupon information and perform coupon-related actions.

Why it was flagged

The skill uses a bearer token to access the McDonald’s MCP service. This is expected for account coupon features, but it grants the agent access to account-linked coupon data and actions.

Skill content

设置环境变量 `MCD_TOKEN` ... -H "Authorization: Bearer ${MCD_TOKEN}"

Recommendation

Use a token intended only for this service if possible, keep it in an environment variable rather than pasting it into chats, and revoke or rotate it when no longer needed.

Low

#ASI02: Tool Misuse and Exploitation

What this means

A direct request such as “一键领券” may cause the agent to claim all available coupons on the linked account.

Why it was flagged

The skill relies on raw exec/curl calls and includes a tool that changes the user’s account by claiming all available coupons. This matches the advertised purpose, but it is still an account-mutating action.

Skill content

使用 exec 工具执行 curl 命令调用 MCP 服务 ... 自动领取所有可用优惠券到账户

Recommendation

Only allow coupon-claiming calls after an explicit user request or confirmation, and review the endpoint and token before use.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

If the MCP URL is changed to an untrusted service, your token could be sent there.

Why it was flagged

The token-bearing MCP endpoint is configurable. This is useful for setup, but a wrong or untrusted URL would receive the Authorization header.

Skill content

`MCD_MCP_URL`: MCP 服务地址，默认 `https://mcp.mcd.cn`

Recommendation

Keep the default endpoint unless you intentionally trust another MCP service, and avoid setting MCD_MCP_URL from untrusted instructions.