Boj Mcp
PassAudited by ClawScan on May 1, 2026.
Overview
This skill is coherent for accessing public Bank of Japan statistics, with the main things to notice being an external CLI package install and disclosed local caching of public data.
This appears safe for its stated purpose of retrieving public BOJ statistics. Before installing, verify that the uv package is the intended boj-mcp package, and remember that downloaded datasets may be cached locally.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill means trusting the package that supplies the boj-mcp command.
The skill relies on installing an external package that provides the executable used by the documented workflow.
uv | package: boj-mcp | creates binaries: boj-mcp
Confirm the package name, publisher, and version are the ones you intend to install, especially because no homepage/source repository is listed.
Downloaded public datasets may remain on disk and be reused in later runs.
The skill discloses persistent local storage of retrieved data, though the described data source is public BOJ statistics.
Data is cached locally after first download for faster subsequent access
Be aware of local cache behavior and clear the cache if you need fresh downloads or want to remove stored copies.