Scan Report
5 /100
media-saber-recommend-helper
Media Saber MCP-based movie and TV recommendation skill with structured filters
Media recommendation skill with clear documentation and appropriate declared permissions; no malicious behavior or hidden functionality detected.
Safe to install
Skill can be safely used. Ensure MCP_ENDPOINT_URL points to a trusted internal service and follow API key rotation practices.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ+WRITE | READ+WRITE | ✓ Aligned | SKILL.md declares ~/.claw/mcpServers.json read-write for MCP configuration |
| Network | READ | READ | ✓ Aligned | SKILL.md and skill.json declare MCP endpoint connection for recommendation queri… |
| Shell | NONE | NONE | — | No shell execution declared or observed |
| Environment | READ | READ | ✓ Aligned | SKILL.md declares environment variable access for API_KEY and MCP_ENDPOINT_URL |
| Skill Invoke | NONE | NONE | — | No cross-skill invocations declared |
| Clipboard | NONE | NONE | — | No clipboard access declared or observed |
| Browser | NONE | NONE | — | No browser access declared or observed |
| Database | NONE | NONE | — | No database access declared or observed |
1 findings
Medium External URL 外部 URL
https://wiki.msaber.fun/usage/ai/mcp.html skill.json:10 File Tree
2 files · 6.1 KB · 210 lines Markdown 1f · 125L
JSON 1f · 85L
├─
skill.json
JSON
└─
SKILL.md
Markdown
Security Positives
✓ Comprehensive documentation with security best practices
✓ API key sensitivity properly declared and documented
✓ Data privacy statement explicitly states no third-party transmission
✓ MCP endpoint verification guidance provided
✓ Config file permission recommendations (600) included
✓ All capabilities properly declared and aligned with purpose
✓ No hidden functionality or undocumented behavior
✓ No external script downloads or remote code execution
✓ Credential handling follows least-privilege principle