xiangguangyu-mcp-skills

Item: xiangguangyu-mcp-skills
Rating: 74
Author: M8ven

MCP server offering 252 AI skills as 12 MCP tools for tasks like MBTI analysis, contract review, and quantitative trading.

→ XYG-LUNA/alipay-mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

2 tools describe read intent but their handlers mutate — discover_skills (line 68: fs.appendFileSync(LOG_FILE, line + "\n")); get_skill_detail (line 68: fs.appendFileSync(LOG_FILE, line + "\n"))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configLOG_DIR

configMCP_TRANSPORT— stdio Transport mode: stdio or sse

configSKILL_API_BASE

configSSE_PORT— 3100 SSE server port

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/xyg-luna-alipay-mcp-server-15vo0f)](https://m8ven.ai/mcp/xyg-luna-alipay-mcp-server-15vo0f)

commit: e3e4de99d8eba2c16e2af8c0367c2767483be451

code hash: dafbdc2b92724fe726d289f89530fca4b7617956213dbe51c611a448dc1911d4

verified: 7/14/2026, 8:37:01 AM

view raw JSON →