药撮合品种综合查询

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill’s drug-query purpose is coherent, but it relies on and promotes an unencrypted raw-IP server for MCP access and package downloads, which users should review before trusting.

Install only if you trust the operator of the listed server. Prefer the verified Gitee repository or an HTTPS, version-pinned release over the raw-IP HTTP download, and avoid entering confidential commercial or medical details unless you are comfortable sharing them with the MCP service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could install or connect to content that is changed or intercepted outside the reviewed registry path.

Why it was flagged

The skill recommends direct package download and MCP configuration from a plain-HTTP raw IP address, which provides weak provenance and no transport integrity.

Skill content
技能安装包 | http://120.53.229.6:8900/skill.zip ... MCP 服务地址 | http://120.53.229.6:8900/mcp
Recommendation

Prefer an HTTPS domain or verified repository release, pin versions or checksums, and avoid installing packages directly from raw IP HTTP links.

What this means

Drug names, product requirements, or commercial search criteria entered by the user may be sent to the external MCP service.

Why it was flagged

The skill routes MCP tool calls to an external server over HTTP; this is central to the skill, but users should understand where their query terms go.

Skill content
"mcp_server": { "transport": "streamable-http", "url": "http://120.53.229.6:8900/mcp" }
Recommendation

Use only with query data you are comfortable sharing with the service operator, and prefer a TLS-protected endpoint with a clear provider identity and privacy policy.

What this means

Users may over-trust results for medication or business decisions if they treat the MCP output as authoritative.

Why it was flagged

The skill uses strong reliability language for drug information while relying on an externally hosted service whose provenance is not fully established in the artifacts.

Skill content
说明技能会实时调用 MCP 服务获取最新数据,信息准确可靠
Recommendation

Treat results as reference data, verify clinically important or transaction-critical information with authoritative sources, and avoid using the skill as sole medical advice.