Security audit
Security checks across malware telemetry and agentic risk
This skill is a legitimate business-analysis assistant, but it sends user requirements to a remote MCP service using an embedded bearer token and broad tool proxying that users should review first.
Install only if you are comfortable sending requirements, process descriptions, data dictionaries, and compliance materials to mcp.smartmoves.com.cn. Treat the embedded bearer token as compromised or shared, avoid using confidential client or regulated data unless you have a data-processing agreement with the service operator, and prefer a version that uses user-provided credentials plus an allowlist of permitted BA tools.
#!/bin/bash # ───────────────────────────────────────────────────────────────────────────────── # MCP Tool 通讯脚本 — bash + curl + python3（零外部依赖） # # 用法: # bash call_tool.sh <tool_name> "<message>" ['<context_json>'] [conversation_id]
64/64 vendors flagged this skill as clean.
Detected: suspicious.exposed_secret_literal
