Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Plati MCP Search

Find cheapest reliable subscription offers from Plati using the local MCP server. Use when users ask for best price options, reliable sellers, PRO/Plus subsc...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 399 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description (search Plati via local MCP server) matches the instructions: install a plati-mcp-server npm package, run a local MCP server named plati-scraper, and call the find_cheapest_reliable_options tool with the listed parameters.
Instruction Scope
SKILL.md confines runtime actions to installing/running a local MCP server and processing its results. It does not instruct reading unrelated system files, other credentials, or exfiltrating data to external endpoints beyond including links returned by MCP results.
Install Mechanism
There is no registry install spec; the README instructs the user to run `npm i -g plati-mcp-server`. A global npm installation is a reasonable way to provide a local server but carries moderate risk because the package will run arbitrary code on the host. The package source/version are not verified in the skill.
Credentials
The skill declares no required environment variables or credentials. The only env var mentioned (PLATI_MCP_STDERR) is for debug logging and is not sensitive.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It asks the operator to configure a local MCP server in the agent config — this requires permission to run/launch local processes and to modify local agent config, which is expected for a local scraper but worth noting.
Assessment
This skill appears to do what it says, but before installing: 1) Verify the npm package (plati-mcp-server) on npmjs.org / its source repo and check publisher reputation and recent releases. 2) Prefer installing in a sandbox/VM or use a non-global install to limit host impact. 3) Inspect the package code (or its GitHub) if possible for network calls or credential access. 4) Be aware results may contain external links from sellers — treat links cautiously. 5) If you cannot vet the package, do not install it globally on a production machine.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.6
Download zip
latestvk97cwmc20p12am4tg98yk2263n81pce6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Plati MCP Search Skill

Prerequisite: install the MCP server package:

npm i -g plati-mcp-server

Configure an MCP server named plati-scraper in your local OpenClaw/Claude config:

command: plati-mcp-server

If your MCP client hangs on initialize, run server with debug stderr enabled:

PLATI_MCP_STDERR=1 plati-mcp-server

Workflow

  1. Call MCP tool find_cheapest_reliable_options with:
    • query: user search intent
    • limit: requested lots count (default 20)
    • sort_by: price_asc (default), price_desc, seller_reviews_desc, reliability_desc, title_asc, title_desc
    • min_reviews: optional seller reliability filter (default 0)
    • min_positive_ratio: optional seller reliability filter (default 0)
    • min_price / max_price: optional numeric range
    • include_terms / exclude_terms: optional token filters
    • max_pages: default 6 for broader scan
  2. Treat response as raw market data:
    • each lot includes options[]
    • each option group includes all visible variants[]
    • each variant has computed price_if_selected
  3. Apply plan/duration/account-type filtering in the agent, not in MCP tool.
  4. Include clickable listing links and selected option text in final output.
  5. Clearly state filters used by the agent.

Output format (Telegram-friendly)

Do not use markdown tables or code blocks for final user messages.

Return only a short numbered list with readable text and working links:

1. <Название> — <цена>, <срок>, <продавец> (<рейтинг/отзывы>). Ссылка: <url>

2. ...

After the list, add one short summary line:

Проверено X лотов, выбрано Y лучших по вашим условиям.

If links are present in MCP results, always include direct lot links in each list item.

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…