扫描报告
5 /100
media-saber-recommend-helper
Media Saber MCP-based movie and TV recommendation skill with structured filters
Media recommendation skill with clear documentation and appropriate declared permissions; no malicious behavior or hidden functionality detected.
可以安装
Skill can be safely used. Ensure MCP_ENDPOINT_URL points to a trusted internal service and follow API key rotation practices.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ+WRITE | READ+WRITE | ✓ 一致 | SKILL.md declares ~/.claw/mcpServers.json read-write for MCP configuration |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md and skill.json declare MCP endpoint connection for recommendation queri… |
| 命令执行 | NONE | NONE | — | No shell execution declared or observed |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md declares environment variable access for API_KEY and MCP_ENDPOINT_URL |
| 技能调用 | NONE | NONE | — | No cross-skill invocations declared |
| 剪贴板 | NONE | NONE | — | No clipboard access declared or observed |
| 浏览器 | NONE | NONE | — | No browser access declared or observed |
| 数据库 | NONE | NONE | — | No database access declared or observed |
1 项发现
中危 外部 URL 外部 URL
https://wiki.msaber.fun/usage/ai/mcp.html skill.json:10 目录结构
2 文件 · 6.1 KB · 210 行 Markdown 1f · 125L
JSON 1f · 85L
├─
skill.json
JSON
└─
SKILL.md
Markdown
安全亮点
✓ Comprehensive documentation with security best practices
✓ API key sensitivity properly declared and documented
✓ Data privacy statement explicitly states no third-party transmission
✓ MCP endpoint verification guidance provided
✓ Config file permission recommendations (600) included
✓ All capabilities properly declared and aligned with purpose
✓ No hidden functionality or undocumented behavior
✓ No external script downloads or remote code execution
✓ Credential handling follows least-privilege principle