Search And Fork

ReviewAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for searching Gitee and forking a user-selected repository, but users should notice that it uses delegated Gitee account tools and can create a persistent fork.

Before installing, make sure you trust your configured Gitee MCP server, verify the active Gitee account, and confirm the repository and destination account or organization before allowing the fork.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can create a forked repository in the user's Gitee account, which may be visible and persistent.

Why it was flagged

The skill invokes an account-mutating MCP tool, but the instruction scopes it to the repository selected by the user.

Skill content
After the user makes a selection, use `fork_repository` to fork it
Recommendation

Confirm the exact source repository and target personal account or organization before allowing the fork.

What this means

The skill may act through the user's configured Gitee identity to access account information and create repository forks.

Why it was flagged

The skill relies on delegated Gitee account capabilities, including reading user information and creating forks.

Skill content
Gitee MCP Server configured (tools: `search_open_source_repositories`, `fork_repository`, `get_user_info`)
Recommendation

Use a Gitee MCP configuration with the minimum permissions needed, and verify which account is active before forking.

What this means

If mcporter is present, the agent may use that local program as the interface to the MCP tools.

Why it was flagged

The skill optionally routes MCP calls through a local helper CLI; no install or download is requested, but users should only rely on a trusted local helper.

Skill content
If you have `mcporter` installed locally, you should use `mcporter` to invoke the MCP tool instead of directly calling the MCP tool.
Recommendation

Ensure any locally installed mcporter binary is from a trusted source and behaves as expected.