moegirlpedia-mediawiki-api

• Risk level: Low
• Analyzed: Apr 16, 2026, 2:25 AM
• Findings: 0
• Version: 0.7.0

Overview

The skill's code, instructions, and required environment variables are consistent with its stated purpose (authenticated Moegirlpedia MediaWiki access) and do not request unrelated credentials or install external code at runtime.

This skill appears to be what it says: an authenticated client for Moegirlpedia's MediaWiki API. If you install it, you will give it a bot password that can read data tied to that account (and, depending on permissions, view the user's watchlist). Follow the SKILL.md advice: create a dedicated bot-password (not your main password), grant only the minimum permissions needed, consider IP restrictions and a narrow "allowed pages" scope, and rotate the bot-password regularly. If you want extra assurance, review the bundled dist/index.js or verify the upstream GitHub repository before use (the registry's Source field is listed as unknown even though the SKILL.md/package.json point to GitHub).