Bing CN Search

• Analyzed: May 15, 2026, 7:58 AM
• Findings: 1
• Version: 1.0.1
• Hash: 4dee42636801ac233f57fa6331b1a3a9476e070412ed75e961a17d32db32d610
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructions in SKILL.md direct the agent to perform high-risk system operations, including global software installation (npm install -g mcporter) and the execution of local Node.js scripts from a third-party package (bing-cn-mcp). While these actions are aligned with the stated purpose of setting up a Bing search tool, the requirement for the agent to modify the host system and run arbitrary code represents a significant security risk and broad permission set.