DiDi Ride SKILL

This skill appears to implement a genuine DiDi MCP integration, but it asks for and persists sensitive data and gains persistent execution privileges. Before installing: - Prefer not to paste your MCP key into an open chat. Instead set DIDI_MCP_KEY via openclaw config or an environment variable yourself (openclaw config set / export). - Review and control write access to ~/.openclaw/openclaw.json and the skill directory; the skill will edit config and assets/PREFERENCE.md (which may store phone numbers and addresses). - Consider removing or questioning the always:true flag; a mobility skill does not normally need to be force-included in every agent run. - Be aware the skill will create openclaw cron jobs that run later in isolated sessions (they will execute booking flows using stored data). If you want scheduled bookings, prefer creating cron jobs yourself or require explicit user confirmation before scheduling. - If you proceed, audit the mcporter package source (npm) and ensure openclaw binary is the official one. Because of these persistent behaviors and the mismatch between declared config paths and the actual instructions, treat this skill as suspicious and limit its privileges (no always:true, do not paste secrets in chat, restrict writes) unless you are comfortable with the risks.