Security audit
追剧/追番技能, 支持投屏到电视
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed media-search and TV-casting skill; its risks are expected for that purpose and should be handled with user caution.
Install only if you trust the upstream mcporter and mcp-vods packages fetched through npx and uvx. Use casting only with TVs you own or are allowed to control, and confirm the media URL and target IP before triggering playback.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.