Detect and prevent identification and authentication failures in JavaScript applications as defined in OWASP Top 10:2021-A07
cursor-rule
mcp
FDangerousALAPI-SDK/mcp-alapi-cn
Source: https://modelcontextprotocol.io/clients
mcp got grade F on our automated scan on 2026-10-26.
Why this grade
- Downloads a script and pipes it into a shell.
- Runs code fetched from the network.
- Some files were not scanned (too many, too big, or not text), so the grade is capped at C.
- No push in over 12 months.
Details
Source
Public file: https://github.com/ALAPI-SDK/mcp-alapi-cn/blob/cb0114f966a1536dfa7b2096da07946793823f23/.cursor/rules/mcp.mdc
Last scanned: (Oct 26, 2026, 2:09 a.m. ET)
Category: uncategorized
License: Present
Before you install
- Read any scripts this skill ships.
- Note every URL it fetches.
- Check allowed-tools and hooks.
Embed this grade
Add this badge to your README. It shows the current grade from CheckSkills.
Report this skill if the grade looks wrong, or if something slipped through.
Related
Rules for Next.js API route structure and security
The First Truly Autonomous Multi-Agent Startup System
This application is designed for deployment on Vercel (recommended) with Hygraph as the CMS backend.
Rules for Next.js API route structure and security