ClawHub

McDonald's China

v1.0.0

Query McDonald's China MCP server via the mcd-cn CLI for campaign calendars, coupons, and auto-claiming. Use for human-friendly coupon lookup or JSON output for scripts.

⭐ 1· 2.3k·2 current·2 all-time
by@ryanchen01
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary (mcd-cn), and required env var (MCDCN_MCP_TOKEN) align with a CLI that queries McDonald's China MCP for calendars/coupons and can perform actions (auto-claim). The primary credential requested is the service token as expected for this purpose.
✓
Instruction Scope
SKILL.md only instructs use of the mcd-cn CLI and mentions storing the token in an env var or .env file. The instructions do not ask the agent to read unrelated system files or exfiltrate data. Note: commands like `auto-bind-coupons` perform account-affecting actions, so the token grants write-capability to the service and can change account state.
ℹ
Install Mechanism
Install is via a Homebrew formula (ryanchen01/tap/mcd-cn), which is a normal install path. Because it is a third-party tap, users should review the tap/homepage (the GitHub repo) before installing to ensure the formula and binary are trustworthy.
ℹ
Credentials
The skill only requires a single service token (MCDCN_MCP_TOKEN), which is proportionate. SKILL.md mentions an optional MCDCN_MCP_URL env var and `.env` usage but only MCDCN_MCP_TOKEN is declared as required — minor mismatch. Storing tokens in .env files means local files may contain sensitive credentials; treat accordingly.
✓
Persistence & Privilege
The skill is not always-enabled and does not request additional persistent system privileges. Autonomous invocation is allowed by default (normal for skills) but nothing in the package requests elevated or system-wide changes.
Assessment
This skill appears to do what it says: it wraps the third-party mcd-cn CLI and needs your McDonald's China MCP token to read coupons and optionally auto-claim them. Before installing: (1) review the Homebrew tap / GitHub repo (ryanchen01/tap and the linked repo) so you trust the source; (2) understand that the token can perform account actions (avoid using a high-value account if you’re unsure); (3) avoid committing the token into repos — prefer secure credential storage; (4) be aware the .env file approach stores the token in plaintext on disk. If any of those concerns are unacceptable, do not install the formula or create a dedicated/test account for use with this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f2va5r9v087rt8rck4qe5yx7zdvtj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🍟 Clawdis
Binsmcd-cn
EnvMCDCN_MCP_TOKEN
Primary envMCDCN_MCP_TOKEN

Install

Install mcd-cn (brew)
Bins: mcd-cn
brew install ryanchen01/tap/mcd-cn

Comments