Real Skill packageSource verifiedClawHub registry

超星智雅 MCP 一键接入

指导用户将超星智雅/StudyAI MCP 服务接入 WorkBuddy 的完整流程：引导用户提供 OAuth2 凭据、本机起回调服务完成授权码换 JWT、写入 mcp.json、配置 refresh_token 常驻保活，并处理 grant_version_stale / scope_denied / invalid_scope 等故障。适用于用户要求连接超星智雅 MCP、令牌过期修复、或重新授权的场景。

Identity and source

Publisher attributionEric JIEregistry owner unverified by skillvetai
Functional categoryAgent Engineering, Security & Governanceautomatically inferred · 62% rule confidence
Package forminstruction with code5 recorded files
Canonical sourceClawHub registryclawhub:erich1566:chaoxing-mcp-oauth
Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 9/23/2026.claude/skills/chaoxing-mcp-oauth

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 9/23/2026.agents/skills/chaoxing-mcp-oauth

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 9/23/2026skills/chaoxing-mcp-oauth

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @erich1566/chaoxing-mcp-oauth
clawhub inspect @erich1566/chaoxing-mcp-oauth --version 1.0.1

Security evidence

SkillVetAI static result: no findings detected

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status
completed
Coverage
full text content
Files
5 / 5 inspected as text
Checked
9/23/2026, 1:28:05 PM
Scanner
0.1.3
Policy
1.0.3
5 inferred permission indicators
  • network access — automatically inferred
  • filesystem read — automatically inferred
  • filesystem write — automatically inferred
  • credential access — automatically inferred
  • external write action — automatically inferred
3 dependency and API indicators
  • api: api.chaoxing.com
  • api: clawhub.ai
  • api: sharewh2.xuexi365.com
External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked
9/23/2026, 4:03:37 AM
Release binding
Matches this record
  • skillspector: suspicious
  • llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:6090fd6450e10c5b3b4cf8537263deb3e624f050e8cf89edfd1927caafe87dc8
Show up to 5 recorded paths
  • scripts/chaoxing-mcp-auto.mjs
  • scripts/chaoxing-mcp-lab.mjs
  • scripts/chaoxing-mcp-refresh.mjs
  • skill-card.md
  • SKILL.md

Source changelog

- Added one-click automatic connection script (`chaoxing-mcp-auto.mjs`) for streamlined access, setup, status check, reauthorization, and background renewal. - Major documentation update: new recommended workflow, step-by-step command usage, and detailed troubleshooting for fully automated or fine-grained manual operation. - Migrated from two-script manual flow to unified intelligent script with local credentials file and browser-based setup (no secrets in conversation). - Removed legacy skill-card.md documentation. - Improved guidance on credential validation, error diagnosis, and system integration (including Windows scheduled tasks). - All previous functions retained; new script handles all connection, renewal, validation, and error recovery automatically.