by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is a lightweight wrapper that runs the mcporter CLI; before installing, verify you trust the mcporter package source (npm) and inspect your ~/.mcporter/mcporter.json. The MCP server URL in that config is the endpoint that will receive your queries — prefer a trusted or local server (e.g., 127.0.0.1) to avoid sending requests to an unknown remote service. The scripts do not perform booking or store credentials, but they will call whatever MCP server you configure, so treat the server U...详细分析 ▾
✓ 用途与能力
Name/description match the code and docs: helper shell scripts call the mcporter CLI to query 12306 MCP endpoints. The requested artifacts (mcporter CLI and a mcporter.json config) are expected for this functionality.
✓ 指令范围
SKILL.md and scripts only instruct running mcporter with user-supplied parameters and reading a config file (default ~/.mcporter/mcporter.json). They do not attempt to read unrelated files, access other environment variables, or transmit data to hidden endpoints in the repository itself.
✓ 安装机制
No install spec in the skill bundle; developer recommends installing mcporter via npm in documentation. The repository contains only small shell scripts and reference docs — no downloads or archive extraction from untrusted URLs.
✓ 凭证需求
The skill declares no required environment variables or credentials. The only config referenced is the user's mcporter.json (expected to hold MCP server URL). There are no unrelated credentials requested.
✓ 持久化与权限
The skill is not 'always' enabled, does not modify other skills or system-wide settings, and does not persist secrets. Scripts are runtime helpers only.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/12
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install mcporter-railway-query
镜像加速npx clawhub@latest install mcporter-railway-query --registry https://cn.longxiaskill.com