Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward MCP time utility with visible Chinese-language output and no evidence of hidden data access, persistence, exfiltration, or destructive behavior.
Install this only if Chinese-language tool text is acceptable for your workflow. For stronger supply-chain control, prefer a release that pins dependency versions and includes a lockfile.
The skill description, feature explanations, and example invocations are entirely in Chinese, including examples that instruct users to request output in Chinese formats. This indicates a language-specific experience without any stated user opt-in, alternative language support, or justification for restricting the skill to Chinese-language usage.
The code forces the 'zh-CN' locale in time formatting and returns all tool descriptions and output text in Chinese, including localized weekday/month names and error messages. This is a natural-language policy concern because the skill does not provide any user opt-in or language/locale selection, and no region-specific justification is present in the file.
This TypeScript skill forces the Chinese locale in multiple user-facing paths, including toLocaleString('zh-CN') and Chinese-only output strings and weekday/month labels. The policy for natural-language violations applies to all file types, and there is no visible user choice or documented opt-in for language/locale selection.
The natural-language content throughout the skill documentation is presented exclusively in Chinese, including the description, examples, and parameter explanations. Under the policy, forcing a specific language without user opt-in can be a locale/language policy violation unless the constraint is explicitly documented and justified, which is not present here.
The package description is written only in Chinese ("获取系统当前时间的 MCP Skill"), which imposes a specific language in user-facing metadata without indicating user opt-in or a documented locale-specific purpose. This can violate language/locale policy when the skill is otherwise general-purpose and not clearly scoped to a Chinese-only audience.
The runtime dependency '@modelcontextprotocol/sdk' is specified with a caret range, allowing newer minor/patch releases to be installed without explicit review. In security-sensitive agent skills, this weakens supply-chain control and can unexpectedly pull in vulnerable or behavior-changing versions, especially given known advisories exist for this package family.
"author": "Your Name",
"license": "MIT",
"dependencies": {
"@modelcontextprotocol/sdk": "^0.5.0"
},
"devDependencies": {
"@types/node": "^20.0.0",
The manifest uses '@modelcontextprotocol/sdk' without pinning to a specific version, while that package has multiple known advisories. Because the exact installed version is not constrained here, consumers may resolve to an affected release, exposing the skill to issues such as data leakage, ReDoS, or DNS rebinding-related weaknesses depending on deployment context.
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"@modelcontextprotocol/sdk": "^0.5.0"
},
"devDependencies": {
"@types/node": "^20.0.0",
"typescript": "^5.0.0"
}
}
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
},
"devDependencies": {
"@types/node": "^20.0.0",
"typescript": "^5.0.0"
}
}
No suspicious patterns detected.