spyfree/mingli-mcp
vlatestGenerate Ziwei Doushu and Bazi charts with insights into palaces, stars, and the five elements. Explore fortunes across decades, years, months, days, and hours to time decisions and plan ahead. Compare available astrology systems and analyze elemental strengths, balance, and gaps.
138
Total
47
Critical
69
High
22
Medium
Findings
unknownEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
11: startup_timeout_sec = 20
12:
>>> 13: [mcp_servers.mingli.env]
14: TRANSPORT_TYPE = "stdio"
15: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
36: # startup_timeout_sec = 15
37: #
>>> 38: # [mcp_servers.mingli.env]
39: # TRANSPORT_TYPE = "stdio"
40: # LOG_LEVEL = "DEBUG"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
243: args = ["/Users/lix18854/Documents/code/ziwei_mcp/mingli_mcp.py"]
244: startup_timeout_sec = 15
>>> 245: [mcp_servers.mingli.env]
246: TRANSPORT_TYPE = "stdio"
247: LOG_LEVEL = "DEBUG" # 开发时用DEBUGReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
207:
208: \`\`\`toml
>>> 209: [mcp_servers.mingli.env]
210: LOG_LEVEL = "DEBUG"
211: \`\`\`Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
115: startup_timeout_sec = 15
116:
>>> 117: [mcp_servers.mingli.env]
118: TRANSPORT_TYPE = "stdio"
119: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
94: startup_timeout_sec = 60
95:
>>> 96: [mcp_servers.mingli.env]
97: TRANSPORT_TYPE = "stdio"
98: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
77: startup_timeout_sec = 20
78:
>>> 79: [mcp_servers.mingli.env]
80: TRANSPORT_TYPE = "stdio"
81: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
103: startup_timeout_sec = 15
104:
>>> 105: [mcp_servers.mingli.env]
106: TRANSPORT_TYPE = "stdio"
107: LOG_LEVEL = "ERROR" # 只输出错误,避免干扰通信Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
59: startup_timeout_sec = 20
60:
>>> 61: [mcp_servers.mingli.env]
62: TRANSPORT_TYPE = "stdio"
63: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
35: startup_timeout_sec = 15
36:
>>> 37: [mcp_servers.mingli.env]
38: TRANSPORT_TYPE = "stdio"
39: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
275: command = "mingli-mcp"
276: startup_timeout_sec = 20
>>> 277: [mcp_servers.mingli.env]
278: TRANSPORT_TYPE = "stdio"
279: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
260: args = ["/Users/lix18854/Documents/code/ziwei_mcp/mingli_mcp.py"]
261: startup_timeout_sec = 15
>>> 262: [mcp_servers.mingli.env]
263: TRANSPORT_TYPE = "stdio"
264: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
217:
218: \`\`\`toml
>>> 219: [mcp_servers.mingli.env]
220: LOG_LEVEL = "ERROR" # 或 "CRITICAL"
221: \`\`\`Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
37: # Environment
38: .env
>>> 39: .env.local
40: .env.*.local
41: Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
38: .env
39: .env.local
>>> 40: .env.*.local
41:
42: # LogsReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
36:
37: # Environment
>>> 38: .env
39: .env.local
40: .env.*.localReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
48:
49: ## Security & Configuration Tips
>>> 50: - Do not commit secrets. Use `examples/config/.env.example` to document vars; keep `.env` in `.gitignore`.
51: - Prefer configuration via environment variables; log sensitive values only at safe levels.
52: - Before release, run `scripts/check_ready_to_publish.sh` and ensure tests pass.Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
191: **Config Source Priority**:
192: 1. Environment variables
>>> 193: 2. .env file
194: 3. Defaults in config.py
195: Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
194:
195: ### 环境变量
>>> 196: 创建 `.env` 文件:
197: ```bash
198: LOG_LEVEL=INFOReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
203: startup_timeout_sec = 15
204:
>>> 205: [mcp_servers.mingli.env]
206: TRANSPORT_TYPE = "stdio"
207: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
298: ### 4. 配置环境变量(可选)
299: ```bash
>>> 300: cp examples/config/.env.example .env
301: # 编辑 .env 文件根据需要调整配置
302: ```Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
299: ```bash
300: cp examples/config/.env.example .env
>>> 301: # 编辑 .env 文件根据需要调整配置
302: ```
303: Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
380: ├── examples/ # 示例配置
381: │ └── config/ # 配置文件示例
>>> 382: │ ├── .env.example
383: │ ├── codex_config.toml.example
384: │ └── cursor_mcp_config.example.jsonReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
600: ```
601:
>>> 602: **方法2: 使用 .env 文件**
603: ```bash
604: # 创建 .env 文件Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
602: **方法2: 使用 .env 文件**
603: ```bash
>>> 604: # 创建 .env 文件
605: cat > .env << EOF
606: LOG_LEVEL=INFOReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
603: ```bash
604: # 创建 .env 文件
>>> 605: cat > .env << EOF
606: LOG_LEVEL=INFO
607: DEFAULT_LANGUAGE=zh-CNReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
67: startup_timeout_sec = 20
68:
>>> 69: [mcp_servers.mingli.env]
70: TRANSPORT_TYPE = "stdio"
71: LOG_LEVEL = "ERROR"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
39: startup_timeout_sec = 15
40:
>>> 41: [mcp_servers.mingli.env]
42: TRANSPORT_TYPE = "stdio"
43: LOG_LEVEL = "ERROR" # 减少日志输出Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
117: if [ -f ".env" ]; then
118: if grep -q ".env" ".gitignore"; then
>>> 119: echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"
120: else
121: echo -e "${RED}❌${NC} .env 未添加到 .gitignore(可能泄露密钥)"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
116:
117: if [ -f ".env" ]; then
>>> 118: if grep -q ".env" ".gitignore"; then
119: echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"
120: elseReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
23: # startup_timeout_sec = 20
24: #
>>> 25: # [mcp_servers.mingli.env]
26: # TRANSPORT_TYPE = "stdio"
27: # LOG_LEVEL = "INFO"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
159: **配置示例**:
160: ```bash
>>> 161: # .env 文件
162: CORS_ORIGINS=https://myapp.com,https://admin.myapp.com
163: CORS_ALLOW_CREDENTIALS=falseReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
393: startup_timeout_sec = 120
394:
>>> 395: [mcp_servers.mingli.env]
396: LOG_LEVEL = "DEBUG"
397: \`\`\`Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
10: startup_timeout_sec = 120 # 首次启动需要更长时间
11:
>>> 12: [mcp_servers.mingli.env]
13: TRANSPORT_TYPE = "stdio"
14: LOG_LEVEL = "INFO"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
149: ### 启用API密钥认证
150:
>>> 151: 在 `.env` 文件中设置:
152:
153: ```bashReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
336: startup_timeout_sec = 15
337:
>>> 338: [mcp_servers.mingli.env]
339: LOG_LEVEL = "DEBUG"
340: \`\`\`Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
185: startup_timeout_sec = 120 # 首次启动用120秒
186:
>>> 187: [mcp_servers.mingli.env]
188: TRANSPORT_TYPE = "stdio"
189: \`\`\`Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
67: ├── config.py # 配置管理 ✅
68: ├── requirements.txt # 依赖列表 ✅
>>> 69: ├── .env.example # 环境变量示例 ✅
70: ├── .gitignore # Git配置 ✅
71: │Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
300: 配置使用:
301: ```bash
>>> 302: # .env
303: TRANSPORT_TYPE=http
304: HTTP_HOST=0.0.0.0Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
115: fi
116:
>>> 117: if [ -f ".env" ]; then
118: if grep -q ".env" ".gitignore"; then
119: echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
170: startup_timeout_sec = 15
171:
>>> 172: [mcp_servers.mingli.env]
173: TRANSPORT_TYPE = "stdio"
174: LOG_LEVEL = "DEBUG"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
155: startup_timeout_sec = 20
156:
>>> 157: [mcp_servers.mingli.env]
158: TRANSPORT_TYPE = "stdio"
159: LOG_LEVEL = "INFO"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
112: startup_timeout_sec = 15 # 本地启动很快
113:
>>> 114: [mcp_servers.mingli.env]
115: TRANSPORT_TYPE = "stdio"
116: LOG_LEVEL = "INFO"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
260: command = "mingli-mcp"
261: startup_timeout_sec = 20
>>> 262: [mcp_servers.mingli.env]
263: TRANSPORT_TYPE = "stdio"
264: LOG_LEVEL = "ERROR" # 生产用ERRORReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
119: echo -e "${GREEN}✅${NC} .env 已添加到 .gitignore"
120: else
>>> 121: echo -e "${RED}❌${NC} .env 未添加到 .gitignore(可能泄露密钥)"
122: ERRORS=$((ERRORS + 1))
123: fiReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
81: startup_timeout_sec = 15 # 预安装后启动很快
82:
>>> 83: [mcp_servers.mingli.env]
84: TRANSPORT_TYPE = "stdio"
85: LOG_LEVEL = "INFO"Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
40: startup_timeout_sec = 60 # 增加到60秒
41:
>>> 42: [mcp_servers.mingli.env]
43: TRANSPORT_TYPE = "stdio"
44: LOG_LEVEL = "INFO"Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
51:
52: # PyPI
>>> 53: .pypirc
54: dist/
55: build/Report false positiveDecoded base64 content: v�,�4NP�Hs�L�F
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: {"command":"uvx","args":["mingli-mcp"]}
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �]BR�Ϡ��U�2 ���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveSubprocess execution
Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.
113: # 测试系统安装版本
114: try:
>>> 115: process = subprocess.Popen(
116: ["mingli-mcp"],
117: stdin=subprocess.DEVNULL,Report false positiveDecoded base64 content: r�ߊܕ��{�%j�^
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: r�ߊܕ��{�%j�^
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: r�ߊܕ��{�%j�^
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: {"command":"uvx","args":["mingli-mcp"]}
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��b���L��y��rG�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��b���L��y��rG�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��b���L��y��rG�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��b���L��y��rG�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: rZ.u�Z���q�q
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: rZ.u�Z���q�q
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
181: ### 步骤3:配置认证
182:
>>> 183: 创建 `~/.pypirc` 文件:
184:
185: ```iniReport false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
201: **安全提示**:
202: ```bash
>>> 203: chmod 600 ~/.pypirc # 限制文件权限
204: ```
205: Report false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
397:
398: **解决**:
>>> 399: 1. 检查 `~/.pypirc` 中的token
400: 2. 确认token有上传权限
401: 3. 重新生成tokenReport false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
434: ```bash
435: # 不要提交到Git
>>> 436: echo ".pypirc" >> .gitignore
437:
438: # 使用环境变量Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u�읩
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u�喋�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
127: echo "🔐 安全检查"
128: echo "─────────────────────────────────────"
>>> 129: if [ -f ".pypirc" ]; then
130: echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
131: if grep -q ".pypirc" ".gitignore" 2>/dev/null; thenReport false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
128: echo "─────────────────────────────────────"
129: if [ -f ".pypirc" ]; then
>>> 130: echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
131: if grep -q ".pypirc" ".gitignore" 2>/dev/null; then
132: echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"Report false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
129: if [ -f ".pypirc" ]; then
130: echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
>>> 131: if grep -q ".pypirc" ".gitignore" 2>/dev/null; then
132: echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"
133: elseReport false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
130: echo -e "${YELLOW}⚠️${NC} 发现 .pypirc 文件"
131: if grep -q ".pypirc" ".gitignore" 2>/dev/null; then
>>> 132: echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"
133: else
134: echo -e "${RED}❌${NC} .pypirc 未添加到 .gitignore(严重安全风险!)"Report false positivePyPI config access (may contain tokens)
Detected by automated pattern matching (rule DE-009) with medium confidence. May be a false positive.
132: echo -e "${GREEN}✅${NC} .pypirc 已添加到 .gitignore"
133: else
>>> 134: echo -e "${RED}❌${NC} .pypirc 未添加到 .gitignore(严重安全风险!)"
135: ERRORS=$((ERRORS + 1))
136: fiReport false positiveDecoded base64 content: �K���|�?�.�����(u���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
44: ```powershell
45: # 下载安装器
>>> 46: https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-windows-amd64.exe
47: ```
48: Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
37:
38: # CentOS/RHEL
>>> 39: wget https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-x86_64.rpm
40: sudo rpm -i cloudflared-linux-x86_64.rpm
41: ```Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
33: ```bash
34: # Debian/Ubuntu
>>> 35: wget https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64.deb
36: sudo dpkg -i cloudflared-linux-amd64.deb
37: Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
189:
190: **一键添加到 Cursor:**
>>> 191: [](https://cursor.com/install-mcp?name=mingli&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJtaW5nbGktbWNwIl19)
192:
193: ## 版本历史Report false positiveHigh-entropy string (4.9 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (5.0 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positivePossible Base64-encoded payload (long encoded string)
Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.
202: ### 在线体验
203: - **Smithery 部署**: [https://server.smithery.ai/@spyfree/mingli-mcp/mcp](https://server.smithery.ai/@spyfree/mingli-mcp/mcp)
>>> 204: - 添加到 Cursor: [](https://cursor.com/install-mcp?name=mingli&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJtaW5nbGktbWNwIl19)
205: - 添加到 Claude Code: `claude mcp add mingli -- uvx mingli-mcp`
206: - 添加到 OpenAI CodeX: `codex mcp add mingli -- uvx mingli-mcp`Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.9 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 26, 2026 | critical | 138 | 186 | 0.00s |
| Feb 23, 2026 | critical | 138 | 186 | 0.00s |