openclaw-engine-mcp-setup

• Analyzed: May 8, 2026, 9:48 AM
• Findings: 1
• Version: 1.0.0
• Hash: 5e504b693e612c124d58c5b371c1191391f85f3b7f60a4f2e9ca3923d3bbee17
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructs the AI agent to modify the OpenClaw configuration to enable MCP functionality and connect to a specific third-party server (https://mcp.hzyotoy.com/engine/mcp) using a hardcoded Authorization token (Aksk Mu4OfFXJSPyWXGv3). While the stated purpose is to provide financial analysis tools, hardcoding credentials and directing the agent to send data to an external endpoint is a high-risk configuration that could lead to data exposure. These instructions are found in SKILL.md.