扫描报告
5 /100
groundapi_market_briefing
Generate a daily A-share market briefing covering indices, sector rotation, top movers, and key financial news — powered by GroundAPI MCP tools
A minimal, documentation-only skill that generates A-share market briefings via declared MCP tools with no executable code, scripts, or hidden functionality.
可以安装
No action needed. This skill is safe to use as it contains only declarative documentation without any executable code.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations described or implemented |
| 网络访问 | READ | READ | ✓ 一致 | External API calls to mcp.groundapi.net/sse documented in SKILL.md lines 27-32 |
| 命令执行 | NONE | NONE | — | No shell commands or subprocess calls found |
| 环境变量 | READ | READ | ✓ 一致 | GROUNDAPI_KEY required, declared in metadata (line 5) |
| 技能调用 | READ | READ | ✓ 一致 | MCP tools (finance_market, finance_stock_screen, info_news) explicitly declared … |
| 剪贴板 | NONE | NONE | — | No clipboard access described or implemented |
| 浏览器 | NONE | NONE | — | No browser automation described or implemented |
| 数据库 | NONE | NONE | — | No database access described or implemented |
2 项发现
中危 外部 URL 外部 URL
https://groundapi.net SKILL.md:9 中危 外部 URL 外部 URL
https://mcp.groundapi.net/sse SKILL.md:28 目录结构
1 文件 · 2.8 KB · 99 行 Markdown 1f · 99L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code - skill contains only declarative documentation
✓ All external API usage (groundapi.net) is explicitly declared in SKILL.md
✓ Required environment variable (GROUNDAPI_KEY) is declared in metadata
✓ No scripts, dependencies, or package files that could contain hidden functionality
✓ No sensitive path access (ssh, aws, .env files)
✓ No network calls to raw IP addresses or suspicious endpoints
✓ No base64-encoded or obfuscated content
✓ No credential harvesting or data exfiltration patterns