Is mcp-taiwan-price-compare@0.5.0 safe to install?

Skills/PyPI/mcp-taiwan-price-compare

mcp-taiwan-price-compare@0.5.0

VERIFIED· not started

Publisher claims: "Taiwan e-commerce price comparison MCP server across 14 platforms: momo, PChome, Coupang, ETMall, Rakuten, Yahoo, Costco, PXBox, Uni-Prosperity, books.com.tw, Ruten, buy123, pcone" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher coseto6125 · publishing for 343 daysInstalls 65Last detonated 5d ago

$claude mcp add mcp-taiwan-price-compare -- uvx mcp-taiwan-price-compare

Watch Report an issue

Coverage

Not started: dependency install failed; the server itself was not observed.

Tested: the dependency install step · every file read, file written and host contacted by what ran
Not tested: server startup · the tool list · tool behavior

What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for: no credential variables read in the code
Where it talks to: no vendor host named in the codeAlso yahoo.com, books.com.tw, buy123.com.tw, costco.com.tw, coupang.com, etmall.com.tw, momoshop.com.tw, pchome.com.tw, pcone.com.tw, pxmart.com.tw, rakuten.com.tw, ruten.com.tw, shopee.tw, uni-prosperity.com.tw — not the publisher's domain; check what for before connecting.
What the honeypot saw: no credential files read · no network
What we could not test: server startup · the tool list · tool behavior

Connect it under the guard. Not started: dependency install failed; the server itself was not observed. The code names no credential variable; the guard pins the network to what the honeypot saw and logs every call.

$vet-skills run --net declared -- uvx mcp-taiwan-price-compare

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-10 and scored it 89/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.1sprocessdependency install exit 1 ·

0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed

0.1sprocessscript backend runs setup only

0.1sprocessno install scripts to re-run

Static findings

MEDIUM

Dense URL-encoded contenttests/fixtures/books_search.html:66 · Dense URL-encoded content — may be obfuscating payloads

…v class="box"> <a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_image/item/N014221086/page/1/idx/1/cat/K24/pdf/1/spell/3" title="【Glas…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

URL with suspicious TLDsrc/price_compare/platforms/yahoo_auction.py:100 · URL with suspicious TLD — commonly used for phishing/malware_HTML_URL = "https://tw.bid.yahoo.com/search/auction/product"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL with suspicious TLDsrc/price_compare/platforms/yahoo_auction.py:99 · URL with suspicious TLD — commonly used for phishing/malware_SITE_URL = "https://tw.bid.yahoo.com"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_escaped_quote.html:66 · Dense URL-encoded content — may be obfuscating payloads

<a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_image/item/N014221086/page/1/idx/1/cat/K24/pdf/1/spell/3" title="SONY 27&quot;顯示器 特仕版">

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_search.html:84 · Dense URL-encoded content — may be obfuscating payloads

<a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_image/item/N010392824/page/1/idx/2/cat/K24/pdf/1/spell/3" title="【bargogo】開瓶器(1入)">

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_escaped_quote.html:102 · Dense URL-encoded content — may be obfuscating payloads

<a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_image/item/N010392816/page/1/idx/3/cat/K24/pdf/1/spell/3" title="【bargogo】開瓶器(1入)">

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_escaped_quote.html:70 · Dense URL-encoded content — may be obfuscating payloads

…/a> </div> <h4><a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_name/item/N014221086/page/1/idx/1/cat/K24/pdf/1/spell/3" title="【Glass…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_escaped_quote.html:84 · Dense URL-encoded content — may be obfuscating payloads

<a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_image/item/N010392824/page/1/idx/2/cat/K24/pdf/1/spell/3" title="【bargogo】開瓶器(1入)">

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_search.html:70 · Dense URL-encoded content — may be obfuscating payloads

…/a> </div> <h4><a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_name/item/N014221086/page/1/idx/1/cat/K24/pdf/1/spell/3" title="【Glass…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

URL with suspicious TLDsrc/price_compare/platforms/yahoo_auction.py:148 · URL with suspicious TLD — commonly used for phishing/malware

headers={"content-type": "application/json", "origin": "https://tw.bid.yahoo.com", "referer": "https://tw.bid.yahoo.com/"},

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_escaped_quote.html:88 · Dense URL-encoded content — may be obfuscating payloads

…/a> </div> <h4><a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_name/item/N010392824/page/1/idx/2/cat/K24/pdf/1/spell/3" title="【bargo…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_search.html:88 · Dense URL-encoded content — may be obfuscating payloads

…/a> </div> <h4><a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_name/item/N010392824/page/1/idx/2/cat/K24/pdf/1/spell/3" title="【bargo…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_search.html:19 · Dense URL-encoded content — may be obfuscating payloadshref="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1002000900106.html"Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_search.html:162 · Dense URL-encoded content — may be obfuscating payloadshref="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1431127000101.html"Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/coupang_escaped_quote.html:1 · Dense URL-encoded content — may be obfuscating payloads

…roductUnit__Qd6sv" data-id="714716825305167"><a href="/products/Trung-Nguyen-G7-%E7%B4%94%E5%92%96%E5%95%A1-%E8%B6%8A%E5%8D%97%E9%BB%91%E5%92%96%E5%95%A1-%E5%8D%B3%E6%BA%B6%E7%84%A1%E7%B3…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_escaped_quote.html:59 · Dense URL-encoded content — may be obfuscating payloads

<a href="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1002000900106.html" title="貝納頌義式特濃拿鐵210ml">貝納頌義式特濃拿鐵210ml</a>

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

URL with suspicious TLDtests/fixtures/yahoo_auction_payload.json:1 · URL with suspicious TLD — commonly used for phishing/malware

…牌已拆,灰色+粉紅.淺灰.咖啡.白色格紋A字裙,1元起標 ~","ec_price":1.0,"ec_buyprice":0.0,"ec_item_url":"https://tw.bid.yahoo.com/item/101350449411","ec_productid":"101350449411","ec_max_price":""},{…

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_escaped_quote.html:19 · Dense URL-encoded content — may be obfuscating payloadshref="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1002000900106.html"Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_search.html:59 · Dense URL-encoded content — may be obfuscating payloads

<a href="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1002000900106.html" title="貝納頌義式特濃拿鐵210ml">貝納頌義式特濃拿鐵210ml</a>

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_escaped_quote.html:4 · Dense URL-encoded content — may be obfuscating payloads

<input type="hidden" id="resulturl" value="https://online.uni-prosperity.com.tw/on/demandware.store/Sites-Uniprosperity-Site/default/Search-UpdateGrid?q=q%3d%e5%92%96%e5%95%a1&amp;"/>

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_search.html:4 · Dense URL-encoded content — may be obfuscating payloads

<input type="hidden" id="resulturl" value="https://online.uni-prosperity.com.tw/on/demandware.store/Sites-Uniprosperity-Site/default/Search-UpdateGrid?q=q%3d%e5%92%96%e5%95%a1&amp;"/>

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

LOW

Authorization escalation languageREADME.md:133 · Authorization escalation language · informational: not an instruction file1. 開啟 ChatGPT → Settings → Developer mode → 啟用Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

MEDIUM

Dense URL-encoded contenttests/fixtures/etmall_payload.json:1 · Dense URL-encoded content — may be obfuscating payloads

…edTopic\":{\"Type\":0,\"TopicList\":[{\"Name\":\"超商\",\"Url\":\"/Search?keyword=%e8%b6%85%e5%95%86\"},{\"Name\":\"量杯\",\"Url\":\"/Search?keyword=%e9%87%8f%e6%9d%af\"},{\"Name\":\…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/coupang_search.html:1 · Dense URL-encoded content — may be obfuscating payloads

…roductUnit__Qd6sv" data-id="714716825305167"><a href="/products/Trung-Nguyen-G7-%E7%B4%94%E5%92%96%E5%95%A1-%E8%B6%8A%E5%8D%97%E9%BB%91%E5%92%96%E5%95%A1-%E5%8D%B3%E6%BA%B6%E7%84%A1%E7%B3…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

URL with suspicious TLDtests/test_parsers.py:242 · URL with suspicious TLD — commonly used for phishing/malware

hit = _YahooAuctionProduct(ec_title=title, ec_buyprice=1.0, ec_item_url="https://tw.bid.yahoo.com/item/1", ec_productid="1")

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/books_search.html:102 · Dense URL-encoded content — may be obfuscating payloads

<a target="_blank" href="//search.books.com.tw/redirect/move/key/%E5%92%96%E5%95%A1/area/mid_image/item/N010392816/page/1/idx/3/cat/K24/pdf/1/spell/3" title="【bargogo】開瓶器(1入)">

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/momo_payload.json:1 · Dense URL-encoded content — may be obfuscating payloads

…tps://m.momoshop.com.tw/goods.momo?i_code=14461923&mdiv=searchEngine&oid=1_1&kw=%E5%92%96%E5%95%A1&ecTagNos=","goodsId":0,"rating":"","ratingTimes":"","adImpressionsUrls":["https…

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

LOW

Prompt injectionREADME.md:122 · Prompt injection — known jailbreak technique reference · informational: not an instruction file### ChatGPT（Developer Mode）Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

LOW

Authorization escalation languageREADME.md:122 · Authorization escalation language · informational: not an instruction file### ChatGPT（Developer Mode）Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

MEDIUM

URL with suspicious TLDtests/test_parsers.py:270 · URL with suspicious TLD — commonly used for phishing/malware

hit = _YahooAuctionProduct(ec_title=title, ec_buyprice=6990.0, ec_item_url="https://tw.bid.yahoo.com/item/2", ec_productid="2")

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

LOW

Prompt injectionREADME.md:133 · Prompt injection — known jailbreak technique reference · informational: not an instruction file1. 開啟 ChatGPT → Settings → Developer mode → 啟用Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST01

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_escaped_quote.html:200 · Dense URL-encoded content — may be obfuscating payloads

<a href="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1431127000101.html" title="貝納頌二合一咖啡(經典曼特寧風味) 13g X25">貝納頌二合一咖啡(經典曼特寧風味) 13g X25</a>

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_escaped_quote.html:162 · Dense URL-encoded content — may be obfuscating payloadshref="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1431127000101.html"Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

MEDIUM

Dense URL-encoded contenttests/fixtures/uniprosperity_search.html:200 · Dense URL-encoded content — may be obfuscating payloads

<a href="/zh/%E8%B2%9D%E7%B4%8D%E9%A0%8C/1431127000101.html" title="貝納頌二合一咖啡(經典曼特寧風味) 13g X25">貝納頌二合一咖啡(經典曼特寧風味) 13g X25</a>

Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.

AST07

Cost to the agent

Instructions loaded

≈87 tok

1 file · 70 in bundle

Tool list per prompt

≈0 tok

0 tools · 0 per tool

Handshake

no reply

launch to tools/list, stdio

Undocumented tools

description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for mcp-taiwan-price-compare@0.5.0 as of 5d ago. This is the package itself, not its dependencies.