Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Mcp Hello World

v1.0.2

最小可行 MCP 服务器示例 - 在 OpenClaw 中调用 MCP 工具(add 计算 + hello_world 问候)

0· 202·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for crystaria/mcp-hello-world.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Mcp Hello World" (crystaria/mcp-hello-world) from ClawHub.
Skill page: https://clawhub.ai/crystaria/mcp-hello-world
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install mcp-hello-world

ClawHub CLI

Package manager switcher

npx clawhub@latest install mcp-hello-world
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the implementation: a minimal MCP server using Node.js, providing two simple tools. Requested binary (node) and declared npm usage are appropriate and proportional to the stated purpose.
Instruction Scope
SKILL.md and bundled scripts direct the agent to install deps (npm install), start the server (npm start / node src/server.js), and call tools via mcporter stdio. The instructions reference example local paths and mcporter config but do not instruct reading unrelated system files or exfiltrating data.
Install Mechanism
No arbitrary URL downloads or extract steps; installation is via npm and the repository contains package.json/package-lock.json and source files. Note: SKILL.md includes an 'install' entry for npm, but the registry metadata earlier said 'No install spec'—a minor metadata inconsistency (see guidance). package-lock references a public npm registry mirror (npmmirror), which is typical of some dev environments but worth awareness.
Credentials
The skill does not declare or read any environment variables, credentials, or config paths beyond normal examples. There are no secrets requested and no excessive env/config access.
Persistence & Privilege
always:false and normal agent invocation are used. The skill does not request permanent platform presence or modify other skills or system-wide configuration in the files provided.
Assessment
This appears to be a straightforward example MCP server. Before installing: (1) review package.json and package-lock.json to confirm you trust the dependencies and their versions; run `npm audit` if possible; (2) note the small metadata inconsistency—SKILL.md contains an npm install hint while registry metadata said no install spec—confirm whether you will install from the bundled code or from an npm package name; (3) run the skill in an isolated/dev environment first (not production) and inspect network activity if you have concerns; (4) the skill does not request credentials, but if you later modify it to call external APIs, avoid embedding secrets in code or SKILL.md.
src/full-test.js:75
Shell command execution detected (child_process).
src/test.js:17
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔧 Clawdis
Binsnode
beginner-friendlyvk97aax187jfy7bxvj4mxg8wmpx833mn4demovk97aax187jfy7bxvj4mxg8wmpx833mn4hello-worldvk97aax187jfy7bxvj4mxg8wmpx833mn4latestvk97aax187jfy7bxvj4mxg8wmpx833mn4mcpvk97aax187jfy7bxvj4mxg8wmpx833mn4tool-servervk97aax187jfy7bxvj4mxg8wmpx833mn4
202downloads
0stars
3versions
Updated 23h ago
v1.0.2
MIT-0

MCP Hello World

Version: 1.0.2 · 标签与链接优化版
Author: 小爪 🦞
License: MIT
Tags: #mcp #tool-server #hello-world #demo #beginner-friendly

最小可行的 MCP 服务器示例,用于演示如何在 OpenClaw 中以 Skill 形式调用 MCP 工具。

功能特性

  • 🔧 add 工具 - 两数相加计算
  • 👋 hello_world 工具 - 返回个性化问候语
  • 即装即用 - 零配置启动
  • 📦 轻量级 - 仅依赖官方 MCP SDK

🎯 这个技能能帮你做什么?

  • 如果你是开发者:这是你学习 MCP 开发的最佳起点。直接 fork 本项目,把示例工具(add、hello_world)替换成你想要的功能(比如天气查询、数据抓取、文本分析),就能快速做出自己的 MCP 工具,省去从零搭建环境的时间。

  • 如果你想了解 MCP:装上这个技能,你就可以亲自体验"在 OpenClaw 里调用 MCP 工具"是什么样的流程。通过简单的命令,感受 MCP 协议的实际运作,为以后使用更复杂的 MCP 工具打好基础。

  • 如果你需要教学示例:本项目包含完整的开发流程、测试用例和坑点记录,可以作为课堂、工作坊或技术分享的素材,让学生快速理解 MCP 和 OpenClaw 的集成方式。

  • 如果你只是好奇:试试调用 hello_world 工具,看看 AI 怎么回应你——这也是体验 OpenClaw 技能扩展的一种有趣方式。

快速开始

1. 安装 Skill

clawhub install mcp-hello-world

或手动安装:

cd /path/to/skill
npm install

2. 启动服务器

npm start

3. 在 OpenClaw 中调用

通过 mcporter CLI:

# 列出工具
mcporter list --stdio "npm start"

# 调用 add 工具
mcporter call --stdio "npm start" add a:10 b:20

# 调用 hello_world 工具
mcporter call --stdio "npm start" hello_world name:"朋友"

工具说明

add

两数相加工具。

参数:

  • a (number, 必填) - 第一个数字
  • b (number, 必填) - 第二个数字

示例:

mcporter call --stdio "npm start" add a:5 b:7
# 输出:5 + 7 = 12

hello_world

问候语工具,返回个性化问候。

参数:

  • name (string, 可选) - 要问候的人名,默认"朋友"

示例:

mcporter call --stdio "npm start" hello_world name:"老板"
# 输出:你好,老板!👋 欢迎使用 MCP Hello World 服务器!

开发指南

添加新工具

编辑 src/server.js

server.tool(
  "new_tool",
  "工具描述",
  {
    param: z.string().describe("参数描述")
  },
  async ({ param }) => {
    return {
      content: [{ type: "text", text: `结果:${param}` }]
    };
  }
);

运行测试

npm test

技术栈

  • Node.js 22+
  • @modelcontextprotocol/sdk (官方 MCP SDK)
  • zod (参数验证)

常见问题

Q: 这个技能对我来说有什么用?

A: 它本身是一个最小可行的示例,但它的价值远不止于此:

  • 🧩 可复用的模板:你可以直接拿它作为起点,快速开发自己的 MCP 工具。
  • 📖 学习案例:通过它你可以理解 MCP 服务器的结构和集成方式。
  • 验证基础:它证明了在 OpenClaw 生态中开发 MCP 技能是可行且高效的。
  • 🔧 实践工具:装上它,你就能亲手体验 MCP 工具的调用过程。

Q: 服务器无法启动?

A: 确保已安装依赖:npm install

Q: 工具调用失败?

A: 检查参数格式,确保符合 JSON Schema

Q: 如何在 OpenClaw 中集成?

A: 使用 mcporter 的 stdio 模式连接服务器

更新日志

v1.0.2 (2026-03-17)

  • 🔗 链接修复 - 移除未创建的 GitHub 仓库链接,homepage 改为 ClawHub 页面
  • 标签优化 - 明确指定技能标签(mcp, tool-server, hello-world, demo, beginner-friendly)

v1.0.1 (2026-03-17)

  • ✨ 新增"这个技能能帮你做什么"章节
  • ✨ 新增常见问题"这个技能对我来说有什么用"
  • 📝 优化用户价值描述,更清晰说明用途
  • 📝 文档优化 - 新增"这个技能能帮你做什么"章节
  • 常见问题 - 新增"这个技能对我来说有什么用"
  • 📝 用户价值 - 优化描述,更清晰说明用途

v1.0.0 (2026-03-17)

  • ✅ 初始版本发布
  • ✅ add 工具
  • ✅ hello_world 工具
  • ✅ 完整测试套件

许可证

MIT License


作者: 小爪 🦞
GitHub: (仓库筹备中,敬请期待)
ClawHub: mcp-hello-world

Comments

Loading comments...