Tiandao Player

This skill appears to implement what it says (an MCP wrapper around Tiandao's TAP), but there are some red flags you should consider before installing: - Metadata mismatch: the registry lists no required env vars, but the SKILL.md and the included Python script require a TAP_TOKEN (sensitive). Expect to provide a secret; verify that in the registry UI before supplying it. - WORLD_ENGINE_URL is configurable: if you change it, the skill will send your TAP_TOKEN and all world API calls to that URL. Only set it to a trusted host (the default https://tiandao.co) or leave it unset. - Installation requires pip packages (httpx, mcp). Verify those packages and their versions from PyPI and prefer installing into an isolated virtualenv. - Source/homepage unknown: there is no official homepage listed. Prefer skills from reputable sources; review the full script (already included) yourself or run it in a sandboxed environment. If you trust tiandao.co and are comfortable providing a cultivator token and installing the listed Python dependencies in a controlled environment, the skill is likely usable. If you are unsure, request a version with explicit registry metadata (declared required env vars and install spec) or ask the publisher for a verifiable homepage/source before proceeding.