Skills/PyPI/mcp-server-hatena-weekly

mcp-server-hatena-weekly@0.1.4

VERIFIED· not started

Publisher claims: "Hatena Bookmark Weekly/Monthly Ranking MCP server for fetching popular bookmarks" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher yareyaredesuyo-yareyaredesuyo · publishing for 531 daysInstalls 27Last detonated 5d ago
$claude mcp add mcp-server-hatena-weekly -- uvx mcp-server-hatena-weekly
WatchReport an issue

Coverage

Not started: dependency install failed; the server itself was not observed.
Tested
the dependency install step · every file read, file written and host contacted by what ran
Not tested
server startup · the tool list · tool behavior

What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
no credential variables read in the code
Where it talks to
no vendor host named in the code
What the honeypot saw
no credential files read · no network
What we could not test
server startup · the tool list · tool behavior

Connect it under the guard. Not started: dependency install failed; the server itself was not observed. The code names no credential variable; the guard pins the network to what the honeypot saw and logs every call.

$vet-skills run --net declared -- uvx mcp-server-hatena-weekly

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-09 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1 ·
0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.1sprocessscript backend runs setup only
0.2sprocessno install scripts to re-run

Static findings

HIGH
Hidden zero-width characters detectedsrc/mcp_server_hatena_weekly/data/week/2023-10-5.json:10 · Hidden zero-width characters detected — may conceal content"title": "「頭がおかしくなりそう」9時17時勤務のハードさに新社会人が涙の訴え（コスモポリタン） - Yahoo!ニュース",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2024-01.json:107 · Dense URL-encoded content — may be obfuscating payloads…02, 2024 | 航空安全推進連絡会議", "url": "https://jfas-sky.jp/2024%E5%B9%B41%E6%9C%882%E6%97%A5%E3%81%AB%E6%9D%B1%E4%BA%AC%E5%9B%BD%E9%9A%9B%E7%A9%BA%E6%B8%AF%E3%81%A7%E7%99%BA%E7%94%9F%E3%81%97%E3%81%9F%E8%88%AA%E7%A9%BA%E6%A9%9F%E4%BA%8B%E6%95%85/…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2023-05.json:143 · Dense URL-encoded content — may be obfuscating payloads"url": "https://dr-takeda.hatenablog.com/entry/2023/01/24/%E3%80%90%E7%AC%AC%EF%BC%91%E8%A9%B1%E3%80%91%E5%B1%A5%E6%AD%B4%E6%9B%B8",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2023-03.json:95 · Dense URL-encoded content — may be obfuscating payloads…23年3月版】 | 株式会社SaaSis", "url": "https://saasis.jp/2023/03/23/%E3%80%90chatgpt%E3%80%91%E6%B5%B7%E5%A4%96sns%E3%81%A7%E3%83%90%E3%82%BA%E3%81%A3%E3%81%9F%E3%83%A4%E3%83%90%E3%81%84%E4%B…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/month/2023-01.json:184 · URL shortener detected — destination cannot be verified…ピーキング満点、IELTSスピーキング8.0取ることができました。スピーキングはこういったフレーズのストックがものを言います。スピーキング力上げたい方は是非。 https://t.co/1MquQctcnN\" / Twitter", "url": "https://twitter.com/cellen0/status/16140615…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2023-08.json:293 · Dense URL-encoded content — may be obfuscating payloads…とで、ネットで...", "url": "https://www.facebook.com/hiroto.nakamura.58/posts/afuri%E3%81%8C%E9%9B%A8%E9%99%8Dafuri%E3%81%A8%E3%81%84%E3%81%86%E6%97%A5%E6%9C%AC%E9%85%92%E3%82%92%E8%B2%A9%E5…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2024-06.json:167 · Dense URL-encoded content — may be obfuscating payloads…は多いと思うし、同じソフトがあるのでそれを使えば問題ないと思うのですが… - Quora", "url": "https://jp.quora.com/%E5%8D%B0%E5%88%B7%E6%A5%AD%E7%95%8C%E3%81%AE%E6%96%B9%E3%81%AF-%E3%81%AA%E3%81%9CMac%E4%BD%BF%E3%81%84%E3%81%AE%E4%BA%BA%E3%81%8C%E5%A4%9A%E3%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2023-02.json:269 · Dense URL-encoded content — may be obfuscating payloads…ためのロードマップ – 東京大学松尾研究室 – Matsuo Lab", "url": "https://weblab.t.u-tokyo.ac.jp/%E4%BA%BA%E5%B7%A5%E7%9F%A5%E8%83%BD%E3%83%BB%E6%B7%B1%E5%B1%A4%E5%AD%A6%E7%BF%92%E3%82%92%E5%AD%A6%E3%81%B6%E3%81%9F%E3%82%81%E3%81%AE%E3%83%AD%E3%83%BC%E3%83%89%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2023-05.json:77 · Dense URL-encoded content — may be obfuscating payloads"url": "https://www.taro.org/2023/05/%E6%96%87%E5%AD%97%E3%82%B3%E3%83%BC%E3%83%89.php",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2023-04.json:125 · Dense URL-encoded content — may be obfuscating payloads…ック術10選【2023年3月版】 | 株式会社SaaSis", "url": "https://saasis.jp/2023/03/31/chatgpt%E3%82%92%E5%B7%A7%E3%81%BF%E3%81%AB%E6%93%8D%E3%82%8B%E7%8C%9B%E8%80%85%E3%81%9F%E3%81%A1%E3%81%8C%E7%94%9F%E3%81%BF%E5%87%BA%E3%81%97%E3%81%9F%E7%A6%81%E6%96%AD%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/month/2023-01.json:178 · URL shortener detected — destination cannot be verified…て、僕が、写経・独学してきた書籍とKaggleの取り組みを紹介したいと思います☺️ 全て真剣に取り組んできたので、気になる書籍があれば、気軽に質問ください☺️ https://t.co/QL57lAy2pH\" / Twitter", "url": "https://twitter.com/kenken26679105/status/1…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2024-08.json:239 · Dense URL-encoded content — may be obfuscating payloads"url": "https://fullfrontal.moe/%E5%AF%8C%E9%87%8E%E7%94%B1%E6%82%A0%E5%AD%A3/",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
HIGH
Hidden zero-width characters detectedsrc/mcp_server_hatena_weekly/data/month/2023-10.json:88 · Hidden zero-width characters detected — may conceal content"title": "「頭がおかしくなりそう」9時17時勤務のハードさに新社会人が涙の訴え（コスモポリタン） - Yahoo!ニュース",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2024-01.json:155 · Dense URL-encoded content — may be obfuscating payloads"url": "https://scrapbox.io/yuiseki/%E3%82%AB%E3%82%B8%E3%83%A5%E3%82%A2%E3%83%AB%E9%9D%A2%E8%AB%87_%E9%80%86%E8%B3%AA%E5%95%8F%E3%83%86%E3%83%B3%E3%83%97%E3%83%AC",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2023-04.json:227 · Dense URL-encoded content — may be obfuscating payloads…術10選【2023年4月上旬編】 | 株式会社SaaSis", "url": "https://saasis.jp/2023/04/15/chatgpt%E3%82%92%E5%B7%A7%E3%81%BF%E3%81%AB%E6%93%8D%E3%82%8B%E7%8C%9B%E8%80%85%E3%81%9F%E3%81%A1%E3%81%8C%E7%94%9F%E3%81%BF%E5%87%BA%E3%81%97%E3%81%9F%E7%A6%81%E6%96%AD%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-01-2.json:40 · URL shortener detected — destination cannot be verified…て、僕が、写経・独学してきた書籍とKaggleの取り組みを紹介したいと思います☺️ 全て真剣に取り組んできたので、気になる書籍があれば、気軽に質問ください☺️ https://t.co/QL57lAy2pH\" / Twitter", "url": "https://twitter.com/kenken26679105/status/1…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-11-2.json:77 · Dense URL-encoded content — may be obfuscating payloads"url": "https://vitroid.github.io/%E6%B0%B4%E3%81%AF%E5%A4%89%E3%82%8F%E3%81%A3%E3%81%9F%E7%89%A9%E8%B3%AA/",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-01-5.json:124 · URL shortener detected — destination cannot be verified…: 21, "title": "KAJI | 梶谷健人 on Twitter: \"ChatGPTはテキトーな回答をするからリサーチに使えないんだけど、https://t.co/DPtF9d0gfCは実務レベルで超使えます。 気になる問いを投げるとWEB上の記事やPDFを元にした回答を瞬時に返してくれて参照URLも併せて提示してくれる。…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-01-2.json:94 · URL shortener detected — destination cannot be verified"title": "ﾌｷﾁｬﾝ on Twitter: \"・地価が高いと子供が減る ・教育志向が高まると子供が減る ・女性が稼ぐと子供が減る ・所得を上げても子供の質を高めて出費も増えるので数は増えない ・児童手当は効果なし ・保育所はﾁｮｯﾄ効果ｱﾙけど高い https://t.co/F6EfgDmLOk 会計検査院の子育て支援策影響調査、まあまあ絶望的で草\" / Twitter",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-04-5.json:161 · Dense URL-encoded content — may be obfuscating payloads…っていて当然のテクニック7選！！ | 株式会社SaaSis", "url": "https://saasis.jp/2023/04/26/chatgpt%E4%BD%BF%E3%81%86%E3%81%AA%E3%82%89%E7%9F%A5%E3%81%A3%E3%81%A6%E3%81%84%E3%81%A6%E5%BD%93%E7%84%B6%E3%81%AE%E3%83%86%E3%82%AF%E3%83%8B%E3%83%83%E3%82%AF7%E9%81%B8…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2025-02.json:5 · Dense URL-encoded content — may be obfuscating payloads"url": "https://dr-takeda.hatenablog.com/entry/2025/02/05/%E5%A3%B0%E6%98%8E%E6%96%87",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-01-1.json:41 · Dense URL-encoded content — may be obfuscating payloads"url": "https://www.americakabu.com/entry/%E6%96%B0%E6%97%A7NISA",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-03-4.json:23 · Dense URL-encoded content — may be obfuscating payloads…23年3月版】 | 株式会社SaaSis", "url": "https://saasis.jp/2023/03/23/%E3%80%90chatgpt%E3%80%91%E6%B5%B7%E5%A4%96sns%E3%81%A7%E3%83%90%E3%82%BA%E3%81%A3%E3%81%9F%E3%83%A4%E3%83%90%E3%81%84%E4%B…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-01-1.json:100 · URL shortener detected — destination cannot be verified"title": "暇空茜 on Twitter: \"Colaboの不正会計疑惑について行った住民監査請求の結果全文です ざっくりまとめ ２月２８日までに ・遡って調べろ、不正があったら返金とかさせろ ・区分守らせろ ・こんなクソ報告書で通すな ・按分しろ ・他に流用すんな ・宿泊、給食費に上限つけろ ・ちゃんと指導しろ https://t.co/lNW80SbO2G\" / Twitter",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-02-3.json:101 · Dense URL-encoded content — may be obfuscating payloads…ためのロードマップ – 東京大学松尾研究室 – Matsuo Lab", "url": "https://weblab.t.u-tokyo.ac.jp/%E4%BA%BA%E5%B7%A5%E7%9F%A5%E8%83%BD%E3%83%BB%E6%B7%B1%E5%B1%A4%E5%AD%A6%E7%BF%92%E3%82%92%E5%AD%A6%E3%81%B6%E3%81%9F%E3%82%81%E3%81%AE%E3%83%AD%E3%83%BC%E3%83%89%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2025-04.json:239 · Dense URL-encoded content — may be obfuscating payloads"url": "https://podcast.1242.com/%E5%BD%AC%E5%AD%90%E5%A5%B3%E7%8E%8B%E3%81%AE%E3%82%AA%E3%83%BC%E3%83%AB%E3%83%8A%E3%82%A4%E3%83%88%E3%83%8B%E3%83%83%E3%83%9D%E3%83%B3premium/",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-04-1.json:35 · Dense URL-encoded content — may be obfuscating payloads…ック術10選【2023年3月版】 | 株式会社SaaSis", "url": "https://saasis.jp/2023/03/31/chatgpt%E3%82%92%E5%B7%A7%E3%81%BF%E3%81%AB%E6%93%8D%E3%82%8B%E7%8C%9B%E8%80%85%E3%81%9F%E3%81%A1%E3%81%8C%E7%94%9F%E3%81%BF%E5%87%BA%E3%81%97%E3%81%9F%E7%A6%81%E6%96%AD%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-03-3.json:83 · Dense URL-encoded content — may be obfuscating payloads"url": "https://sawaki-book-diary.net/%E4%BC%8A%E9%9B%86%E9%99%A2%E5%85%89%E3%81%A8%E5%A4%A7%E6%B1%9F%E5%81%A5%E4%B8%89%E9%83%8E-2/",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-01-3.json:40 · URL shortener detected — destination cannot be verified…ピーキング満点、IELTSスピーキング8.0取ることができました。スピーキングはこういったフレーズのストックがものを言います。スピーキング力上げたい方は是非。 https://t.co/1MquQctcnN\" / Twitter", "url": "https://twitter.com/cellen0/status/16140615…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-04-4.json:161 · Dense URL-encoded content — may be obfuscating payloads…のアイコンは近年立体的なポップなものから平面的なものに変わったのですか？ - Quora", "url": "https://jp.quora.com/%E3%81%AA%E3%81%9C%E3%82%B9%E3%83%9E%E3%83%9B%E3%82%A2%E3%83%97%E3%83%AA%E3%81%AE%E3%82%A2%E3%82%A4%E3%82%B3%E3%83%B3%E3%81%AF%E8%BF%91%E5%B9%B4%E7%AB%8B%E4%BD%93%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-05-2.json:35 · Dense URL-encoded content — may be obfuscating payloads"url": "https://www.taro.org/2023/05/%E6%96%87%E5%AD%97%E3%82%B3%E3%83%BC%E3%83%89.php",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-02-1.json:166 · URL shortener detected — destination cannot be verified…フレーズが思いつかなくてもワンクリックで適切なヒント表示(3枚目) ・改善案をフィードバック(4枚目) これからはAIと話して語学を学ぶのが当たり前になりそう https://t.co/oKoYdZQcQG\" / Twitter", "url": "https://twitter.com/uvwuvw/status/162187876…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-02-4.json:166 · URL shortener detected — destination cannot be verified…ことにまず驚いた。そしてそれが28年間で800件。男らは本国に帰って安心してただろうが、弁護士は養育費を強制的に徴収する米国の制度を使って養育費を勝ち取った。 https://t.co/SvuDf67aYT\" / Twitter", "url": "https://twitter.com/arapanman/status/162766…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-02-3.json:125 · Dense URL-encoded content — may be obfuscating payloads"url": "http://www.highriskrevolution.com/wp/gamelife/2023/02/15/%E6%9B%B8%E7%B1%8D%E3%80%8C%E3%82%B2%E3%83%BC%E3%83%A0%E3%81%AE%E6%AD%B4%E5%8F%B2%E3%80%8D%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A61/",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-09-1.json:161 · Dense URL-encoded content — may be obfuscating payloads"url": "https://saihatsuboushi.com/%E8%AA%BF%E6%9F%BB%E5%A0%B1%E5%91%8A%E6%9B%B8%EF%BC%88%E5%85%AC%E8%A1%A8%E7%89%88%EF%BC%89.pdf",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-02-1.json:88 · URL shortener detected — destination cannot be verified…: "とだこうき@デイトラ運営 on Twitter: \"これもう、Google検索は要らないかもな Chromeで検索エンジンとして、Perplexity（https://t.co/unAignEWWp）を登録しておけば、めっちゃ気軽にAI使って調べ物できる。ChatGPTとは違って参考文献を提示してくれるので普通に仕事で使える。 やり方は…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-08-3.json:179 · Dense URL-encoded content — may be obfuscating payloads…hatGPTで変わる「優秀な人材」 - ところてん - Medium", "url": "https://tokoroten.medium.com/ai%E3%81%AF%E3%81%A9%E3%81%AE%E3%82%88%E3%81%86%E3%81%AA%E4%BB%95%E4%BA%8B%E3%81%8C%E3%81%A7%E3%81%8D%E3%82%8B%E3%82%88%E3%81%86%E3%81%AB%E3%81%AA%E3%81%A3%E3%81%9F%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-03-1.json:70 · URL shortener detected — destination cannot be verified"title": "𝑷𝒆𝒕𝒆𝒓 on Twitter: \"海外の掲示板にあった「日本の必聴盤」リスト、めちゃくちゃバランス良くないですか https://t.co/ujE9beTNEN\" / Twitter",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-08-1.json:65 · Dense URL-encoded content — may be obfuscating payloads…": "LK-99は本当に常温常圧超伝導を達成しているのか - 理系のための備忘録", "url": "https://science-log.com/%E7%89%A9%E7%90%86/lk-99%E3%81%AF%E6%9C%AC%E5%BD%93%E3%81%AB%E5%B8%B8%E6%B8%A9%E5%B8%B8%E5%9C%A7%E…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-08-4.json:77 · Dense URL-encoded content — may be obfuscating payloads…とで、ネットで...", "url": "https://www.facebook.com/hiroto.nakamura.58/posts/afuri%E3%81%8C%E9%9B%A8%E9%99%8Dafuri%E3%81%A8%E3%81%84%E3%81%86%E6%97%A5%E6%9C%AC%E9%85%92%E3%82%92%E8%B2%A9%E5…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-05-1.json:107 · Dense URL-encoded content — may be obfuscating payloads…Tを日本語で試してわかった気になるのをやめろ - 西尾泰和のScrapbox", "url": "https://scrapbox.io/nishio/%E7%84%A1%E8%AA%B2%E9%87%91%E3%81%AEChatGPT%E3%82%92%E6%97%A5%E6%9C%AC%E8%AA%9E%E3%81%A7%E8%A9%A6%E3%81%97%E3%81%A6%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-01-2.json:160 · URL shortener detected — destination cannot be verified…e": "Yuske Fukuyama on Twitter: \"教育オタクなのでプログラミング学習サービスは大体知ってるんだけど、最近で一番いいなと思った。https://t.co/ioFOAjoUIM - Redis, Git, Dockerの再実装など少し複雑なソフトウェアを自作する課題 - 名だたる企業のエンジニアが作ったカリキュラム…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/month/2024-09.json:257 · Dense URL-encoded content — may be obfuscating payloads"url": "https://blog.mrym.tv/2024/08/google-play%E3%81%AE%E4%BD%8F%E6%89%80%E5%85%AC%E9%96%8B%E3%81%AB%E9%96%8B%E6%A5%AD%E5%B1%8A%E3%81%A7%E5%AF%BE%E5%BF%9C%E3%81%99%E3%82%8B/",Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
MEDIUM
URL shortener detectedsrc/mcp_server_hatena_weekly/data/week/2023-02-3.json:136 · URL shortener detected — destination cannot be verified"title": "Minazo🐘 on Twitter: \"JAXAの会見の 共同通信の記者の捨て台詞 https://t.co/fYwX3yNWzQ\" / Twitter",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Dense URL-encoded contentsrc/mcp_server_hatena_weekly/data/week/2023-08-4.json:125 · Dense URL-encoded content — may be obfuscating payloads…意義は？それとも使い捨てですか？CDプレイヤーって今でも売れていますか？ - Quora", "url": "https://jp.quora.com/%E3%81%84%E3%81%BE%E3%81%A0%E3%81%ABCD%E3%82%92%E8%B2%B7%E3%81%84%E7%B6%9A%E3%81%91%E3%81%A6%E3%81%84%E3%82%8B%E4%BA…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07

Cost to the agent

Instructions loaded
≈62 tok
1 file · 81 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for mcp-server-hatena-weekly@0.1.4 as of 5d ago. This is the package itself, not its dependencies.