milligold-mcp@0.3.0
VERIFIED· not startedPublisher claims: "Unofficial read-only MCP server for Milli.gold (milli.gold): live 18k gold price, price history, platform stats, fees, trade quotes, news and help." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry PyPI (MCP server)Publisher sepehr071 · publishing for 42 daysInstalls 0Last detonated 3d ago
Coverage
Not started: dependency install failed; the server itself was not observed.- Tested
- the dependency install step · every file read, file written and host contacted by what ran
- Not tested
- server startup · the tool list · tool behavior
What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.
Before you give it your token
- It will ask for
- no credential variables read in the code
- Where it talks to
- no vendor host named in the codeAlso milli.gold — not the publisher's domain; check what for before connecting.
- What the honeypot saw
- no credential files read · no network
- What we could not test
- server startup · the tool list · tool behavior
Connect it under the guard. Not started: dependency install failed; the server itself was not observed. The code names no credential variable; the guard pins the network to what the honeypot saw and logs every call.
$vet-skills run --net declared -- uvx milligold-mcp
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-11 and scored it 80/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1 ·
0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.1sprocessscript backend runs setup only
0.1sprocessno install scripts to re-run
Static findings
MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_feed.xml:31 · Hidden zero-width characters detected — may conceal content
AST07<title>قیمت انس طلا امروز سه‌شنبه ۵ آبان ۱۴۰۵ / افت ۸ دلاری قیمت طلای جهانی</title>Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Dense URL-encoded contenttests/fixtures/news_article.html:89 · Dense URL-encoded content — may be obfuscating payloads
AST07…\u0642\u06cc\u0645\u062a \u0637\u0644\u0627","url":"https:\/\/milli.gold\/news\/%d9%82%db%8c%d9%85%d8%aa-%d8%b7%d9%84%d8%a7-%d8%a7%d9%85%d8%b1%d9%88%d8%b2-%db%b5-%d8%a2%d8%a8%d8%a7%d9%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Hidden zero-width characters detectedtests/fixtures/fees.html:88 · Hidden zero-width characters detected — may conceal content
AST07…lumn-3"> در صورتی که قصد انتقال بیش از ۱۰۰۰ میلی داشته باشید، ، معادل ۰.۰۵% (یک‌دهم درصد) از مبلغ انتقال‌تان را به عنوان کارمزد خواهید پرداخت.</td> </tr> </tbo…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_feed.xml:14 · Hidden zero-width characters detected — may conceal content
AST07<description>جدیدترین اخبار اقتصادی، طلا و سرمایه‌گذاری</description>Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/fees.html:112 · Hidden zero-width characters detected — may conceal content
AST07…ody class="row-striping"> <tr class="row-2"> <td class="column-1">کارمزد پرداخت‌یار</td><td class="column-2">۲۰۰۰ تومان</td><td class="column-3"> کارمزد واریز و…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_feed.xml:41 · Hidden zero-width characters detected — may conceal content
AST07<description><![CDATA[<p>قیمت انس طلا امروز سه‌شنبه ۵ آبان ۱۴۰۵ با کاهش ۸ دلاری نسبت به روز گذشته به ۴ هزار و ۳ دلار رسید. آخرین نرخ اونس جهانی را بخوانید.</p>Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_article.html:45 · Hidden zero-width characters detected — may conceal content
AST07…خ در مقایسه با روز گذشته بالاتر است، اما میزان دقیق افزایش قیمت در اطلاعات اعلام‌شده مشخص نشده است.</p> <p class="wp-block-paragraph">قیمت طلای ۱۸ عیار یکی از…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Dense URL-encoded contenttests/fixtures/help_sitemap.xml:157 · Dense URL-encoded content — may be obfuscating payloads
AST07…webp</image:loc> </image:image> </url> <url> <loc>https://milli.gold/help/%d8%a2%d9%85%d9%88%d8%b2%d8%b4-%d9%88%d8%a7%d8%b1%db%8c%d8%b2-%d8%b1%db%8c%d8%a7%d9%84-%d8%a8%d8%a7-%d8%b4%d9%…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_feed.xml:11 · Hidden zero-width characters detected — may conceal content
AST07<title>اخبار میلی</title>Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.HIGH
Collapsed <details> block carrying instructionsREADME.md:163 · Collapsed <details> block carrying instructions
AST01<summary><b>Anything else</b></summary> It's a standard stdio MCP server: run `uvx milligold-mcp`, or `pip install milligold-mcp` and run `milligold-mcp`.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_article.html:2 · Hidden zero-width characters detected — may conceal content
AST07قیمت طلا امروز سه‌شنبه ۵ آبان ۱۴۰۵ / هر گرم طلای ۱۸ عیار چند شد؟ </h1>Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Dense URL-encoded contenttests/fixtures/news_feed.xml:32 · Dense URL-encoded content — may be obfuscating payloads
AST07<link>https://milli.gold/news/%d9%82%db%8c%d9%85%d8%aa-%d8%a7%d9%86%d8%b3-%d8%b7%d9%84%d8%a7-%d8%a7%d9%85%d8%b1%d9%88%d8%b2-%db%b5-%d8%a2%d8%a8%d8%a7%d9%86-%db%b1%db%b4%db%b0%db%b5/</link>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Unicode escape sequence detectedtests/fixtures/news_article.html:89 · Unicode escape sequence detected — may contain obfuscated payloads
AST07…ne":"\u0642\u06cc\u0645\u062a \u0637\u0644\u0627 \u0627\u0645\u0631\u0648\u0632 \u0633\u0647\u200c\u0634\u0646\u0628\u0647 \u06f5 \u0622\u0628\u0627\u0646 \u06f1\u06f4\u06f0\u06f5 \/ \u0647\u0631 \u06af…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_article.html:37 · Hidden zero-width characters detected — may conceal content
AST07…e="قیمت طلای ۱۸ عیار امروز" target="_blank" rel="noopener">قیمت طلا امروز</a> سه‌شنبه ۵ آبان ۱۴۰۵ با افزایش همراه شد. بر اساس نرخ اعلام‌شده از سوی سایت اتحادیه ط…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/news_feed.xml:25 · Hidden zero-width characters detected — may conceal content
AST07<title>اخبار میلی</title>Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.Cost to the agent
Instructions loaded
≈74 tok
1 file · 29 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
No advisories in OSV for milligold-mcp@0.3.0 as of 3d ago. This is the package itself, not its dependencies.