[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6GX22TSTC7R9YZMC4DMH177":3,"skill-same:01M6GX22TSTC7R9YZMC4DMH177":69},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":15,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":27,"linkOnly":28,"markdownContent":29,"markdownBody":30,"frontMatter":31,"refName":32,"commitSha":33,"skillDirectory":34,"forksCount":35,"repositoryHtmlUrl":36,"repositoryHomepageUrl":6,"ownerHtmlUrl":37,"ownerBlogUrl":38,"ownerDescription":39,"updatedAt":40,"install":41,"resources":54},"01M6GX22TSTC7R9YZMC4DMH177","rezearcher-mcp-scan",null,"jiayaoqijia\u002Fcryptoskill","jiayaoqijia","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1453879?v=4","01M6GMYTX7Q7S504VC6E756ENR","YQ","01M6GMYV1QKJ1CC75MTTGT9PR0",81,"MIT","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fmcp-servers\u002Frezearcher-mcp-scan\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fmcp-servers\u002Frezearcher-mcp-scan\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26],"MCP","scan","rezearcher mcp scan","2026-11-10 10:12:30",false,"---\nname: mcp-scan\ndescription: Use when about to add, install, or trust a third-party MCP server — runs a free pre-flight tool-poisoning \u002F prompt-injection scan on its advertised tools and returns clear\u002Freview\u002Fblock. Triggers: install MCP server, add MCP server, mcp.json, tool poisoning, prompt injection in tool descriptions, vet MCP server, claude mcp add.\n---\n\n# mcp-scan — vet an MCP server before you connect an agent to it\n\nStatic analysis of a server's advertised tool metadata (descriptions, schemas, hidden unicode). It does not call the server's tools. Free preview returns tools scanned, issue counts by severity, risk score and verdict (clear \u002F review \u002F block).\n\n## Remote server (Streamable HTTP)\n\n```bash\nB=https:\u002F\u002Fx402-data-api.sigrunner.workers.dev\ncurl -s \"$B\u002Fscan\u002Fmcp\u002Fpreview?url=https:\u002F\u002FHOST\u002Fmcp\"\n```\n\n## Private, OAuth-gated or stdio server\n\nPaste its `tools\u002Flist` result; nothing needs to be reachable from outside:\n\n```bash\ncurl -s -X POST \"$B\u002Fscan\u002Fmcp\u002Fpreview\" -H 'content-type: application\u002Fjson' \\\n  -d '{\"tools\":[ ...the \"tools\" array from tools\u002Flist... ]}'\n```\n\n## Acting on the verdict\n\n- `clear` — proceed.\n- `review` — read the flagged tool descriptions before enabling the server.\n- `block` — do not connect; tell the user which tool and why.\n\nThe full itemized report with evidence and OWASP mapping is the paid route `GET \u002Fscan\u002Fmcp` ($0.05 USDC via x402 on Base). CLI: `npx github:rezearcher\u002Fgreyridge-x402-tools mcpscan \u003Curl>` (exit code 2 = block). Methodology and measured limits: https:\u002F\u002Fgithub.com\u002Frezearcher\u002Fx402-data-api\u002Fblob\u002Fmain\u002Fdocs\u002FSTATUS.md\n","# mcp-scan — vet an MCP server before you connect an agent to it\n\nStatic analysis of a server's advertised tool metadata (descriptions, schemas, hidden unicode). It does not call the server's tools. Free preview returns tools scanned, issue counts by severity, risk score and verdict (clear \u002F review \u002F block).\n\n## Remote server (Streamable HTTP)\n\n```bash\nB=https:\u002F\u002Fx402-data-api.sigrunner.workers.dev\ncurl -s \"$B\u002Fscan\u002Fmcp\u002Fpreview?url=https:\u002F\u002FHOST\u002Fmcp\"\n```\n\n## Private, OAuth-gated or stdio server\n\nPaste its `tools\u002Flist` result; nothing needs to be reachable from outside:\n\n```bash\ncurl -s -X POST \"$B\u002Fscan\u002Fmcp\u002Fpreview\" -H 'content-type: application\u002Fjson' \\\n  -d '{\"tools\":[ ...the \"tools\" array from tools\u002Flist... ]}'\n```\n\n## Acting on the verdict\n\n- `clear` — proceed.\n- `review` — read the flagged tool descriptions before enabling the server.\n- `block` — do not connect; tell the user which tool and why.\n\nThe full itemized report with evidence and OWASP mapping is the paid route `GET \u002Fscan\u002Fmcp` ($0.05 USDC via x402 on Base). CLI: `npx github:rezearcher\u002Fgreyridge-x402-tools mcpscan \u003Curl>` (exit code 2 = block). Methodology and measured limits: https:\u002F\u002Fgithub.com\u002Frezearcher\u002Fx402-data-api\u002Fblob\u002Fmain\u002Fdocs\u002FSTATUS.md\n",{},"main","3df1d0d67b30ff15236561f8c0f9f06d33f42dfd","skills\u002Fmcp-servers\u002Frezearcher-mcp-scan",17,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia","https:\u002F\u002Feth2030.com","Hardcore infra. Building @alt-research and applied cryptography.","2026-11-15 02:28:10",{"source":7,"skillName":5,"commands":42,"prompt":52,"zipAvailable":53},[43,46,49],{"tool":44,"command":45},"npx","npx skills add jiayaoqijia\u002Fcryptoskill --skill rezearcher-mcp-scan",{"tool":47,"command":48},"bunx","bunx skills add jiayaoqijia\u002Fcryptoskill --skill rezearcher-mcp-scan",{"tool":50,"command":51},"pnpm","pnpm dlx skills add jiayaoqijia\u002Fcryptoskill --skill rezearcher-mcp-scan","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fmcp-servers\u002Frezearcher-mcp-scan\u002FSKILL.md",true,[55,59,65],{"path":56,"resourceType":56,"resourceTypeDesc":57,"sizeBytes":58,"sourceHtmlUrl":15},"LICENSE","许可证",1085,{"path":60,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":63,"sourceHtmlUrl":64},"SOURCE.md","REFERENCE","参考文档",360,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fmcp-servers\u002Frezearcher-mcp-scan\u002FSOURCE.md",{"path":66,"resourceType":61,"resourceTypeDesc":62,"sizeBytes":67,"sourceHtmlUrl":68},"TRUST.auto.yaml",2114,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fmcp-servers\u002Frezearcher-mcp-scan\u002FTRUST.auto.yaml",[70,98,121,139,152,162],{"skillNo":71,"name":72,"nameZh":6,"description":73,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":74,"sourceHtmlUrl":75,"categories":76,"keywords":77,"publishedAt":27},"01M712C436EQYE43342Q4E7GG1","recipe-performance","Diagnose a specific MetaMask user flow's real-app performance and Sentry critical-user-flow telemetry with deterministic mm-harness recipes. Use for CUF boundaries, cold\u002Fwarm\u002Fbackground-resume behavior, latency regressions, lifecycle tags, duplicate or blocking network requests, long tasks, layout\u002Fpaint cost, screen redraws, React rerenders, or browser trace analysis where tests alone cannot prove the real app.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fwallets\u002Fmetamask-official-recipe-performance\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fwallets\u002Fmetamask-official-recipe-performance\u002FSKILL.md",[],[78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97],"performance","recipe performance","recipe","mm","sentry","harness","app","deterministic","recipes","flow","cold","critical","analysis","tasks","react","browser","layout","screen","network","metamask",{"skillNo":99,"name":100,"nameZh":6,"description":101,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":102,"licenseFileUrl":103,"sourceHtmlUrl":104,"categories":105,"keywords":106,"publishedAt":27},"01M70XT2F8A5CQZ81JBP98KSW3","mexc-spot-websocket","MEXC Spot WebSocket workflows for public streams, protobuf handling, depth maintenance, listen keys, and private streams without exposing API keys.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-websocket\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-websocket\u002FSKILL.md",[],[107,108,109,110,111,112,113,114,115,116,117,118,119,120],"mexc spot websocket","spot","websocket","api","workflows","public","listen","streams","depth","keys","for","api keys","maintenance","protobuf",{"skillNo":122,"name":123,"nameZh":6,"description":124,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":102,"licenseFileUrl":125,"sourceHtmlUrl":126,"categories":127,"keywords":128,"publishedAt":27},"01M70XT0MBXN3WZY1BKN0CPNKR","mexc-spot-rest","MEXC Spot REST workflows for public data, signed account requests, orders, wallet\u002Fadmin actions, and secure signing without exposing API keys.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-rest\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-rest\u002FSKILL.md",[],[129,108,130,131,132,133,134,118,117,116,135,136,137,112,138,111,110],"mexc spot rest","REST","admin","signing","Wallet","requests","actions","secure","data","orders",{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":102,"licenseFileUrl":143,"sourceHtmlUrl":144,"categories":145,"keywords":146,"publishedAt":27},"01M70XSYSVZ2N0N91XCAR2CAK0","mexc-futures-websocket","MEXC Futures WebSocket workflows for public streams, private account\u002Forder\u002Fposition streams, ping\u002Fpong, subscriptions, and depth maintenance.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-futures-websocket\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-futures-websocket\u002FSKILL.md",[],[147,148,109,149,150,119,117,151,115,114,112,111],"mexc futures websocket","futures","position","ping","subscriptions",{"skillNo":153,"name":154,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":155,"sourceHtmlUrl":156,"categories":157,"keywords":158,"publishedAt":27},"01M6H0ZWHVE5W04WG2DKQE2SQC","0xklen-version-and-refresh-sanctions-lists","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-version-and-refresh-sanctions-lists\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-version-and-refresh-sanctions-lists\u002FSKILL.md",[],[159,160,161],"refresh","0xklen version and refresh sanctions lists","version",{"skillNo":163,"name":164,"nameZh":6,"description":165,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":166,"sourceHtmlUrl":167,"categories":168,"keywords":169,"publishedAt":27},"01M6H0Z28Q3R8J0S799GJQWXM3","verify-tests-cover-changed-lines","Use when a PR adds code that the existing suite may not exercise. Measures patch coverage — the share of newly changed lines hit by tests — before approving.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-verify-tests-cover-changed-lines\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-verify-tests-cover-changed-lines\u002FSKILL.md",[],[170,171,172,173,174,175,176,177,178,179,180],"tests","cover","verify tests cover changed lines","verify","coverage","pr","exercise","use","patch","code","share"]