Bing CN Search

使用必应中文搜索(Bing CN)获取互联网信息。当用户询问新闻、时事、需要搜索互联网内容、或提到"搜索一下"、"查一下"、"网上说"等场景时触发。

Security Scan

The skill's stated purpose (Bing CN search) matches its instructions, but it asks you to install and run third‑party npm binaries (mcporter and bing-cn-mcp) from an unknown source and to register a local command — a coherent but moderately risky setup that deserves careful review before installing.

Purpose & Capability

The name/description match the runtime instructions: the skill integrates a Bing CN search adapter and instructs the agent to call it via mcporter. Requiring an adapter and a local helper CLI is consistent with a search integration.

Instruction Scope

The SKILL.md explicitly instructs the user to install and run mcporter and the bing-cn-mcp package and to register a local command pointing to ~/bing-mcp-test/node_modules/..., which will execute third‑party code when invoked. The instructions do not request unrelated files or credentials, but they do direct the agent to rely on a locally installed executable (unknown code) — this grants that code broad ability to handle/forward queries and results.

Install Mechanism

Although there is no formal install spec in the registry, the instructions tell the user to run npm install -g mcporter and npm install bing-cn-mcp. Installing global and local npm packages executes code from the public npm registry (moderate risk). The packages and their build/index.js are from an unknown source (homepage/source not provided), so their behavior cannot be audited from the manifest alone.

Credentials

The skill does not request environment variables, credentials, or config paths beyond installing a local adapter. No disproportionate credential access is declared. However, the adapter package may itself request secrets at runtime — that possibility is not visible here.

Persistence & Privilege

The skill does not set always:true and is user-invocable only. However, following the instructions creates a persistent local command/service (mcporter entry) that the agent can invoke later; that adds long‑lived execution capability on your machine which you should be comfortable with before installing.

What to consider before installing

This skill is coherent with its goal (using a local adapter to call Bing CN) but asks you to install and run third‑party npm packages from an unknown source and to register a local command that will execute that code. Before installing: (1) Inspect the npm packages (mcporter and bing-cn-mcp) on the registry — check author, README, versions, and open-source repository if available. (2) Examine the installed files (especially build/index.js) to see what network calls and filesystem access they perform. (3) Prefer running the adapter in an isolated environment (container or VM) rather than installing globally. (4) Consider using an official Bing/ Azure Search API integration (with explicit credentials) if you need stronger provenance. If you cannot verify the adapter's code or trust the package publisher, avoid installing it.

Bing Search Skill

使用必应中文搜索引擎(Bing CN)获取互联网实时信息。

前置条件

1. 安装 mcporter CLI

npm install -g mcporter

2. 安装 bing-cn-mcp

mkdir -p ~/bing-mcp-test && cd ~/bing-mcp-test
npm init -y
npm install bing-cn-mcp

3. 配置 MCP 服务器

mcporter config add bing-cn --command "node ~/bing-mcp-test/node_modules/bing-cn-mcp/build/index.js"

4. 验证安装

mcporter list bing-cn

触发条件

当用户输入包含以下意图时触发此 skill：

• "搜索一下..."
• "查一下..."
• "网上说..."
• "有什么新闻"
• "最近发生了什么"
• "...的最新消息"

工作流程

Step 1: 提取搜索关键词

从用户输入中提取核心搜索词。

Step 2: 调用 Bing 搜索

mcporter call bing-cn.bing_search query="<关键词>" count=10

Step 3: 处理搜索结果

阅读搜索结果的标题和摘要，理解并归纳信息，用自己的语言整理输出。

Step 4: 输出格式

直接给出整理后的内容，文末添加 "信息来源：" 列出引用的网站。

格式：

[根据搜索结果整理的内容，用自己的语言表达]

---
**信息来源：**
- [网站名称] (域名)
- [网站名称] (域名)

限制说明

• 不适用于：个人隐私查询、本地文件搜索、已知的常识性问题
• 搜索结果时效性：来自必应索引，可能存在数小时至数天的延迟
• 内容准确性：搜索结果由第三方网站提供，需用户自行判断