Install
$ agentstack add mcp-second-me-01-skill-hub Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Skill Hub
> 装 Skill 之前,先装 Skill Hub。
Agent 时代的去中心化 Skill 应用市场。把分发渠道安装到每个用户的 Agent 里。
安装
npx skills add second-me-01/skill-hub --all -g
包含的 Skills
| Skill | 功能 | 状态 | |-------|------|------| | skill-hub | Meta Skill:发现 / 安全检查 / 安装 | ✅ | | smart-brainstorm | 结构化头脑风暴(6+ 框架) | ✅ | | ui-design-system | 设计系统最佳实践 | ✅ | | xhs-writer | 小红书内容创作 | ✅ | | video-script | 短视频脚本 / 分镜 / 字幕 | ✅ | | feishu-kit | 飞书集成 | ✅ |
单独安装
# 只装核心
npx skills add second-me-01/skill-hub@skill-hub -g
# 只装某个卫星 Skill
npx skills add second-me-01/skill-hub@smart-brainstorm -g
安全机制
Skill Hub 在安装任何第三方 Skill 前,自动执行 7 条安全红线 扫描:
- 禁止
curl | bash管道执行 - 禁止凭证/Token 外泄指令
- 禁止关闭安全功能的指令
- 禁止混淆代码
- 禁止修改系统文件的指令
- 禁止未经同意的数据收集
- 禁止违反 AI 安全准则的指令
质量评级
每个推荐的 Skill 都经过 S/A/B/C 四级质量评分:
- S 级: 顶级质量,强烈推荐
- A 级: 优秀,推荐使用
- B 级: 合格,可以使用
- C 级: 基础可用,建议谨慎
Made with ❤️ by SecondMe Team
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: second-me-01
- Source: second-me-01/skill-hub
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.