Dynamics Partner Advisor
v1.0.0Search, compare, and shortlist Microsoft Dynamics 365 implementation partners by product, industry, and region. Use when someone asks about finding a Dynamic...
⭐ 0· 87·0 current·0 all-time
byColin Greig@colingreig
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the runtime instructions: the skill is an instruction-only connector to a hosted Top Dynamics Partners MCP server for searching and shortlisting Dynamics 365 partners. Requested capabilities (search, get details, recommend) align with the described external API endpoints and features.
Instruction Scope
Instructions are narrowly scoped to configuring an MCP SSE connection to the specified https://topdynamicspartners.com endpoints and calling the listed tools (search_partners, get_partner_details, recommend_shortlist). The SKILL.md does not ask the agent to read local files or unrelated env vars. It does instruct you to send project descriptions and requirements to the external service — avoid including secrets or highly sensitive PII in those requests.
Install Mechanism
The registry shows 'no install spec' (instruction-only), but SKILL.md recommends running an npx command to start @modelcontextprotocol/server-sse against the provider's SSE URL. That will fetch and execute code from the npm registry at runtime (transient download). This is a legitimate approach for MCP SSE but is a supply-chain consideration you should review (verify the npm package and its maintainer).
Credentials
No env vars, credentials, or config paths are required for basic access per the SKILL.md. An API key is optional for higher-tier features, which is proportional to the advertised authenticated tier. There are no unrelated credential requests.
Persistence & Privilege
Skill is not marked always:true and does not request persistent system-wide configuration. It is user-invocable with normal autonomous invocation; nothing in the manifest attempts to modify other skills or system settings.
Assessment
This skill appears to do what it says: connect your agent to Top Dynamics Partners' MCP SSE endpoints to search and shortlist Microsoft Dynamics implementation partners. Before installing, verify the external domain (topdynamicspartners.com) and the npm package @modelcontextprotocol/server-sse (it will be pulled via npx at runtime). Do not send secrets, passwords, or unnecessary sensitive PII in project descriptions you forward to the service. If you need higher-volume or full partner profiles, follow the site’s API key registration and read their privacy/terms. If you or your organization have strict supply-chain policies, inspect the npm package source (or use a vetted local MCP client) rather than allowing npx to fetch and execute code automatically.Like a lobster shell, security has layers — review code before you run it.
latestvk979ysay2brcejrp0043vtkk5n83vm6m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.