Bing CN Search

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Bing search helper, with only ordinary cautions about installing npm/MCP dependencies and sending search queries to an external search service.

This skill appears safe for ordinary web searches. Before installing, verify the npm packages you are asked to install, avoid running setup with administrator privileges, and do not submit sensitive personal, account, or confidential information as search queries.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If one of the installed npm packages is compromised or changes unexpectedly, it could affect the local environment when installed or run.

Why it was flagged

The setup installs external npm packages without pinned versions and configures one package as an MCP server. This is consistent with the search purpose, but it introduces normal package-provenance risk.

Skill content
npm install -g mcporter ... npm install bing-cn-mcp ... mcporter config add bing-cn --command "node ~/bing-mcp-test/node_modules/bing-cn-mcp/build/index.js"
Recommendation

Install only from trusted npm sources, consider pinning versions, and run the MCP server with normal user privileges rather than elevated privileges.

What this means

Search queries may leave the local environment and be processed by the MCP package and Bing CN search service.

Why it was flagged

The skill sends extracted user search keywords through an MCP call to a Bing search service. This is expected for the skill, but it is an external data boundary.

Skill content
mcporter call bing-cn.bing_search query="<关键词>" count=10
Recommendation

Avoid using this skill for private personal information, secrets, credentials, or sensitive internal topics; review the returned sources critically.