Openclaw
v1.0.2AWS expert powered by the AWS Knowledge MCP Server (via mcporter). Provides real-time access to AWS documentation, best practices, SOPs, and regional availab...
⭐ 0· 44·0 current·0 all-time
by@w0yne
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (AWS knowledge via an MCP server) match the declared requirement: mcporter is the CLI used to call the MCP server. There are no unexpected env vars, credentials, or config paths declared that would be unrelated to fetching AWS docs or SOPs.
Instruction Scope
SKILL.md contains explicit mcporter command lines to search/read/recommend/list regions/get availability/retrieve SOPs. It does not instruct the agent to read local files, shell history, or other system secrets. Note: queries (user-supplied content) will be transmitted to the configured MCP server (aws-knowledge) — this is expected for the skill's purpose.
Install Mechanism
The install spec installs the 'mcporter' npm package (creates the mcporter binary). Using npm is a reasonable, traceable install route, but it carries the usual supply-chain/network risks of installing packages from a public registry. No obscure download URLs or archive extraction are used.
Credentials
No environment variables, credentials, or config paths are required by the skill. That is proportionate to its function as a documentation/query wrapper. The SKILL.md does require that mcporter be configured with an MCP server; the skill does not itself request secrets, but the configured mcporter server or its config may contain endpoints/credentials outside this skill's control.
Persistence & Privilege
always is false and the skill does not request elevated or permanent presence. It does not modify other skills or system-wide settings in the instructions. Autonomous invocation (model can call the skill) is enabled by default and appropriate here.
Assessment
This skill appears to do what it says: it calls an MCP server via the mcporter CLI to fetch AWS docs and SOPs. Before installing/use: 1) Confirm the provenance of the 'mcporter' npm package (review the package page, version, and maintainer) and install from a trusted registry or your approved package mirror. 2) Verify which MCP server your mcporter is configured to talk to (ensure the endpoint is trusted and uses TLS). 3) Avoid including secrets or sensitive snippets in queries — anything you send will go to the MCP server. 4) If you need higher assurance, inspect the mcporter package source and the mcporter configuration on your system before invoking the skill. 5) Prefer explicit manual install and review of mcporter rather than blind automatic installs in production environments.Like a lobster shell, security has layers — review code before you run it.
latestvk971amc4jpd5exvzd1bxf3f08n8429w8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
☁️ Clawdis
Binsmcporter
Install
Install mcporter (npm)
Bins: mcporter
npm i -g mcporter