ICUICU
critical

spyfree/mingli-mcp

vlatest

Generate Ziwei Doushu and Bazi charts with insights into palaces, stars, and the five elements. Explore fortunes across decades, years, months, days, and hours to time decisions and plan ahead. Compare available astrology systems and analyze elemental strengths, balance, and gaps.

SmitheryspyfreeFirst seen Feb 23, 2026Source

138

Total

47

Critical

69

High

22

Medium

Findings

unknown
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    11: startup_timeout_sec = 20
    12: 
>>> 13: [mcp_servers.mingli.env]
    14: TRANSPORT_TYPE = "stdio"
    15: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    36: # startup_timeout_sec = 15
    37: #
>>> 38: # [mcp_servers.mingli.env]
    39: # TRANSPORT_TYPE = "stdio"
    40: # LOG_LEVEL = "DEBUG"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    243: args = ["/Users/lix18854/Documents/code/ziwei_mcp/mingli_mcp.py"]
    244: startup_timeout_sec = 15
>>> 245: [mcp_servers.mingli.env]
    246: TRANSPORT_TYPE = "stdio"
    247: LOG_LEVEL = "DEBUG"  # 开发时用DEBUG
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    207: 
    208: \`\`\`toml
>>> 209: [mcp_servers.mingli.env]
    210: LOG_LEVEL = "DEBUG"
    211: \`\`\`
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    115: startup_timeout_sec = 15
    116: 
>>> 117: [mcp_servers.mingli.env]
    118: TRANSPORT_TYPE = "stdio"
    119: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    94: startup_timeout_sec = 60
    95: 
>>> 96: [mcp_servers.mingli.env]
    97: TRANSPORT_TYPE = "stdio"
    98: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    77: startup_timeout_sec = 20
    78: 
>>> 79: [mcp_servers.mingli.env]
    80: TRANSPORT_TYPE = "stdio"
    81: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    103: startup_timeout_sec = 15
    104: 
>>> 105: [mcp_servers.mingli.env]
    106: TRANSPORT_TYPE = "stdio"
    107: LOG_LEVEL = "ERROR"  # 只输出错误,避免干扰通信
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    59: startup_timeout_sec = 20
    60: 
>>> 61: [mcp_servers.mingli.env]
    62: TRANSPORT_TYPE = "stdio"
    63: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    35: startup_timeout_sec = 15
    36: 
>>> 37: [mcp_servers.mingli.env]
    38: TRANSPORT_TYPE = "stdio"
    39: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    275: command = "mingli-mcp"
    276: startup_timeout_sec = 20
>>> 277: [mcp_servers.mingli.env]
    278: TRANSPORT_TYPE = "stdio"
    279: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    260: args = ["/Users/lix18854/Documents/code/ziwei_mcp/mingli_mcp.py"]
    261: startup_timeout_sec = 15
>>> 262: [mcp_servers.mingli.env]
    263: TRANSPORT_TYPE = "stdio"
    264: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    217: 
    218: \`\`\`toml
>>> 219: [mcp_servers.mingli.env]
    220: LOG_LEVEL = "ERROR"  # 或 "CRITICAL"
    221: \`\`\`
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    37: # Environment
    38: .env
>>> 39: .env.local
    40: .env.*.local
    41: 
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    38: .env
    39: .env.local
>>> 40: .env.*.local
    41: 
    42: # Logs
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    36: 
    37: # Environment
>>> 38: .env
    39: .env.local
    40: .env.*.local
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    48: 
    49: ## Security & Configuration Tips
>>> 50: - Do not commit secrets. Use `examples/config/.env.example` to document vars; keep `.env` in `.gitignore`.
    51: - Prefer configuration via environment variables; log sensitive values only at safe levels.
    52: - Before release, run `scripts/check_ready_to_publish.sh` and ensure tests pass.
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    191: **Config Source Priority**:
    192: 1. Environment variables
>>> 193: 2. .env file
    194: 3. Defaults in config.py
    195: 
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    194: 
    195: ### 环境变量
>>> 196: 创建 `.env` 文件:
    197: ```bash
    198: LOG_LEVEL=INFO
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    203: startup_timeout_sec = 15
    204: 
>>> 205: [mcp_servers.mingli.env]
    206: TRANSPORT_TYPE = "stdio"
    207: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    298: ### 4. 配置环境变量(可选)
    299: ```bash
>>> 300: cp examples/config/.env.example .env
    301: # 编辑 .env 文件根据需要调整配置
    302: ```
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    299: ```bash
    300: cp examples/config/.env.example .env
>>> 301: # 编辑 .env 文件根据需要调整配置
    302: ```
    303: 
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    380: ├── examples/                  # 示例配置
    381: │   └── config/               # 配置文件示例
>>> 382: │       ├── .env.example
    383: │       ├── codex_config.toml.example
    384: │       └── cursor_mcp_config.example.json
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    600: ```
    601: 
>>> 602: **方法2: 使用 .env 文件**
    603: ```bash
    604: # 创建 .env 文件
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    602: **方法2: 使用 .env 文件**
    603: ```bash
>>> 604: # 创建 .env 文件
    605: cat > .env << EOF
    606: LOG_LEVEL=INFO
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    603: ```bash
    604: # 创建 .env 文件
>>> 605: cat > .env << EOF
    606: LOG_LEVEL=INFO
    607: DEFAULT_LANGUAGE=zh-CN
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    67: startup_timeout_sec = 20
    68: 
>>> 69: [mcp_servers.mingli.env]
    70: TRANSPORT_TYPE = "stdio"
    71: LOG_LEVEL = "ERROR"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    39: startup_timeout_sec = 15
    40: 
>>> 41: [mcp_servers.mingli.env]
    42: TRANSPORT_TYPE = "stdio"
    43: LOG_LEVEL = "ERROR"  # 减少日志输出
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    117: if [ -f ".env" ]; then
    118:     if grep -q ".env" ".gitignore"; then
>>> 119:         echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"
    120:     else
    121:         echo -e "${RED}❌${NC} .env 未添加到 .gitignore(可能泄露密钥)"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    116: 
    117: if [ -f ".env" ]; then
>>> 118:     if grep -q ".env" ".gitignore"; then
    119:         echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"
    120:     else
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    23: # startup_timeout_sec = 20
    24: #
>>> 25: # [mcp_servers.mingli.env]
    26: # TRANSPORT_TYPE = "stdio"
    27: # LOG_LEVEL = "INFO"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    159: **配置示例**:
    160: ```bash
>>> 161: # .env 文件
    162: CORS_ORIGINS=https://myapp.com,https://admin.myapp.com
    163: CORS_ALLOW_CREDENTIALS=false
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    393: startup_timeout_sec = 120
    394: 
>>> 395: [mcp_servers.mingli.env]
    396: LOG_LEVEL = "DEBUG"
    397: \`\`\`
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    10: startup_timeout_sec = 120  # 首次启动需要更长时间
    11: 
>>> 12: [mcp_servers.mingli.env]
    13: TRANSPORT_TYPE = "stdio"
    14: LOG_LEVEL = "INFO"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    149: ### 启用API密钥认证
    150: 
>>> 151: 在 `.env` 文件中设置:
    152: 
    153: ```bash
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    336: startup_timeout_sec = 15
    337: 
>>> 338: [mcp_servers.mingli.env]
    339: LOG_LEVEL = "DEBUG"
    340: \`\`\`
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    185: startup_timeout_sec = 120  # 首次启动用120秒
    186: 
>>> 187: [mcp_servers.mingli.env]
    188: TRANSPORT_TYPE = "stdio"
    189: \`\`\`
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    67: ├── config.py                  # 配置管理 ✅
    68: ├── requirements.txt           # 依赖列表 ✅
>>> 69: ├── .env.example              # 环境变量示例 ✅
    70: ├── .gitignore                # Git配置 ✅
    71: │
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    300: 配置使用:
    301: ```bash
>>> 302: # .env
    303: TRANSPORT_TYPE=http
    304: HTTP_HOST=0.0.0.0
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    115: fi
    116: 
>>> 117: if [ -f ".env" ]; then
    118:     if grep -q ".env" ".gitignore"; then
    119:         echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    170: startup_timeout_sec = 15
    171: 
>>> 172: [mcp_servers.mingli.env]
    173: TRANSPORT_TYPE = "stdio"
    174: LOG_LEVEL = "DEBUG"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    155: startup_timeout_sec = 20
    156: 
>>> 157: [mcp_servers.mingli.env]
    158: TRANSPORT_TYPE = "stdio"
    159: LOG_LEVEL = "INFO"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    112: startup_timeout_sec = 15  # 本地启动很快
    113: 
>>> 114: [mcp_servers.mingli.env]
    115: TRANSPORT_TYPE = "stdio"
    116: LOG_LEVEL = "INFO"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    260: command = "mingli-mcp"
    261: startup_timeout_sec = 20
>>> 262: [mcp_servers.mingli.env]
    263: TRANSPORT_TYPE = "stdio"
    264: LOG_LEVEL = "ERROR"  # 生产用ERROR
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    119:         echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"
    120:     else
>>> 121:         echo -e "${RED}❌${NC} .env 未添加到 .gitignore(可能泄露密钥)"
    122:         ERRORS=$((ERRORS + 1))
    123:     fi
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    81: startup_timeout_sec = 15  # 预安装后启动很快
    82: 
>>> 83: [mcp_servers.mingli.env]
    84: TRANSPORT_TYPE = "stdio"
    85: LOG_LEVEL = "INFO"
Report false positive
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    40: startup_timeout_sec = 60  # 增加到60秒
    41: 
>>> 42: [mcp_servers.mingli.env]
    43: TRANSPORT_TYPE = "stdio"
    44: LOG_LEVEL = "INFO"
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    51: 
    52: # PyPI
>>> 53: .pypirc
    54: dist/
    55: build/
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: v�,�4NP�Hs�L�F

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: {"command":"uvx","args":["mingli-mcp"]}

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �]BR�Ϡ��U �2 ���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highSC-001Suspicious CommandsMedium ConfidenceLine 0

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    113: # 测试系统安装版本
    114: try:
>>> 115:     process = subprocess.Popen(
    116:         ["mingli-mcp"],
    117:         stdin=subprocess.DEVNULL,
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r�ߊܕ��{�%j�^

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r�ߊܕ��{�%j�^

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r�ߊܕ��{�%j�^

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: {"command":"uvx","args":["mingli-mcp"]}

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��b���L��y��rG�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��b���L��y��rG�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��b���L��y��rG�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��b���L��y��rG�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: rZ.u�Z���q�q

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: rZ.u�Z���q�q

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    181: ### 步骤3:配置认证
    182: 
>>> 183: 创建 `~/.pypirc` 文件:
    184: 
    185: ```ini
Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    201: **安全提示**:
    202: ```bash
>>> 203: chmod 600 ~/.pypirc  # 限制文件权限
    204: ```
    205: 
Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    397: 
    398: **解决**:
>>> 399: 1. 检查 `~/.pypirc` 中的token
    400: 2. 确认token有上传权限
    401: 3. 重新生成token
Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    434: ```bash
    435: # 不要提交到Git
>>> 436: echo ".pypirc" >> .gitignore
    437: 
    438: # 使用环境变量
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u�읩

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u�喋�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    127: echo "🔐 安全检查"
    128: echo "─────────────────────────────────────"
>>> 129: if [ -f ".pypirc" ]; then
    130:     echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
    131:     if grep -q ".pypirc" ".gitignore" 2>/dev/null; then
Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    128: echo "─────────────────────────────────────"
    129: if [ -f ".pypirc" ]; then
>>> 130:     echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
    131:     if grep -q ".pypirc" ".gitignore" 2>/dev/null; then
    132:         echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"
Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    129: if [ -f ".pypirc" ]; then
    130:     echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
>>> 131:     if grep -q ".pypirc" ".gitignore" 2>/dev/null; then
    132:         echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"
    133:     else
Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    130:     echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
    131:     if grep -q ".pypirc" ".gitignore" 2>/dev/null; then
>>> 132:         echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"
    133:     else
    134:         echo -e "${RED}❌${NC} .pypirc 未添加到 .gitignore(严重安全风险!)"
Report false positive
highDE-009Data ExfiltrationMedium ConfidenceLine 0

PyPI config access (may contain tokens)

Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.

    132:         echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"
    133:     else
>>> 134:         echo -e "${RED}❌${NC} .pypirc 未添加到 .gitignore(严重安全风险!)"
    135:         ERRORS=$((ERRORS + 1))
    136:     fi
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: �K���|�?�.�����(u���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    44: ```powershell
    45: # 下载安装器
>>> 46: https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-amd64.exe
    47: ```
    48: 
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    37: 
    38: # CentOS/RHEL
>>> 39: wget https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-x86_64.rpm
    40: sudo rpm -i cloudflared-linux-x86_64.rpm
    41: ```
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    33: ```bash
    34: # Debian/Ubuntu
>>> 35: wget https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64.deb
    36: sudo dpkg -i cloudflared-linux-amd64.deb
    37: 
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    189: 
    190: **一键添加到 Cursor:**
>>> 191: [![Install MCP Server](https://img.shields.io/badge/Cursor-Add+MCP+Server-blue?logo=cursor)](https://cursor.com/install-mcp?name=mingli&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJtaW5nbGktbWNwIl19)
    192: 
    193: ## 版本历史
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.0 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    202: ### 在线体验
    203: - **Smithery 部署**: [https://server.smithery.ai/@spyfree/mingli-mcp/mcp](https://server.smithery.ai/@spyfree/mingli-mcp/mcp)
>>> 204: - 添加到 Cursor: [![Install MCP Server](https://img.shields.io/badge/Cursor-Add+MCP+Server-blue?logo=cursor)](https://cursor.com/install-mcp?name=mingli&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJtaW5nbGktbWNwIl19)
    205: - 添加到 Claude Code: `claude mcp add mingli -- uvx mingli-mcp`
    206: - 添加到 OpenAI CodeX: `codex mcp add mingli -- uvx mingli-mcp`
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive

Scan History

DateRiskFindings
Feb 26, 2026critical138
Feb 23, 2026critical138