quera-mcp@0.2.0
VERIFIED· not startedPublisher claims: "Unofficial read-only MCP server for Quera (quera.org): Iranian tech jobs, companies, contests, problems and courses." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry PyPI (MCP server)Publisher sepehr071 · publishing for 43 daysInstalls 489Last detonated 14 min ago
Coverage
Not started: dependency install failed; the server itself was not observed.- Tested
- the dependency install step · every file read, file written and host contacted by what ran
- Not tested
- server startup · the tool list · tool behavior
What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.
Before you give it your token
- It will ask for
- no credential variables read in the code
- Where it talks to
- quera.org (its own)
- What the honeypot saw
- no credential files read · no network
- What we could not test
- server startup · the tool list · tool behavior
Connect it under the guard. Not started: dependency install failed; the server itself was not observed. The code names no credential variable and talks to quera.org, its own; the guard pins the network to what the honeypot saw and logs every call.
$vet-skills run --net declared -- uvx quera-mcp
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-15 and scored it 90/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.2sprocessdependency install exit 1 ·
0.2sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.2sprocessscript backend runs setup only
0.2sprocessno install scripts to re-run
Static findings
MEDIUM
Hidden zero-width characters detectedtests/fixtures/bootcamp.json:13 · Hidden zero-width characters detected — may conceal content
AST07…": 54000000, "users_can_register": true, "installment_text": "برای تسهیل ثبت‌نام، امکان پیش‌ثبت‌نام فراهم است. همچنین تخفیف ۱۰ درصدی برای افرادی که در بازه پ…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/company_jobs.json:1 · Hidden zero-width characters detected — may conceal content
AST07…Project Hunter", "open": true, "level": "Mid-Level", "collaboration_type": "تمام‌وقت", "salary": "۵۵,۰۰۰,۰۰۰ تا ۶۵,۰۰۰,۰۰۰", "salary_short": "۵۵ تا ۶۵", "offers_…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/jobs.json:1 · Hidden zero-width characters detected — may conceal content
AST07…Count": 30, "edges": [{"node": {"pk": "dkmg6", "title": "کارشناس تضمین کیفیت نرم‌افزار", "open": true, "level": "Mid-Level", "collaboration_type": "تمام‌وقت", "s…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/company.json:1 · Hidden zero-width characters detected — may conceal content
AST07…جمعی از متخصصان خلاق حوزه تکنولوژی شکل گرفت که در سال ۱۳۹۸ تصمیم گرفتند از مهارت‌های فنی خود فراتر از مرزها استفاده کنند. ایده‌ی اصلی، همکاری با کارفرماهای خارجی…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/bootcamps.json:26 · Hidden zero-width characters detected — may conceal content
AST07"final_registered_count_title": "ثبت‌نام‌کنندگان نهایی",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/problem_filters.json:39 · Hidden zero-width characters detected — may conceal content
AST07"label": "قدیمی‌ترین",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/bootcamps.json:37 · Hidden zero-width characters detected — may conceal content
AST07"description": "یادگیری مهندسی DevOps همراه با پروژهی تیمی",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/contest_search.json:1 · Hidden zero-width characters detected — may conceal content
AST07…ماتی المپیک فناوری ۲۰۲۵ - Golang", "featured_card_description": "اگر عاشق برنامه‌نویسی با گولنگ و حل چالش‌های جذاب و کارآمد هستید، مسیر گولنگ المپیک فناوری ۲۰۲۵ …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/problems.json:1 · Hidden zero-width characters detected — may conceal content
AST07…, "edges": [{"node": {"pk": "356509", "url": "/problemset/356509", "name": "خبیث‌حسین", "solved_count": 39, "tried_count": 190, "pinned": false, "difficulty": "H…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/bootcamp.json:3 · Hidden zero-width characters detected — may conceal content
AST07"bootcamp_type_text": "بوت‌کمپ آنلاین همراه با منتورشیپ و پروژهی تیمی",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/bootcamps.json:6 · Hidden zero-width characters detected — may conceal content
AST07"description": "یادگیری مباحث هوش مصنوعی همراه با پروژهی تیمی",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/event.json:29 · Hidden zero-width characters detected — may conceal content
AST07… اقتصاد دانش‌بنیان دیجیتال" } ], "intro": "<p dir=\"auto\">لیگ ملی برنامه‌نویسی دانشجویی شامل ۳ مرحله است؛ مسابقه دست‌گرمی، مسابقات انتخابی و مسابقه نهایی…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/job.json:1 · Hidden zero-width characters detected — may conceal content
AST07… \"JobPosting\", \"title\": \"IT Project Hunter\", \"description\": \"<h2>درباره‌ی این فرصت شغلی</h2> <p dir=\\\"auto\\\"><strong>About the Role:</strong></p>\\r…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/bootcamps.json:31 · Hidden zero-width characters detected — may conceal content
AST07"keywords": "بوت‌کمپ هوش مصنوعی",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/problem_filters.json:169 · Hidden zero-width characters detected — may conceal content
AST07"label": "مسابقه مهندسی نرم‌افزار Novatech",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/college.json:1 · Hidden zero-width characters detected — may conceal content
AST07…buy_scheme_color": null, "college": {"pk": 14471, "name": "دروازه ورود به برنامه‌نویسی", "name_description": "اولین قدم برای ورود به دنیای پرهیجان برنامه‌نویسی",…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/problem.json:1 · Hidden zero-width characters detected — may conceal content
AST07…حدودیت زمان: ۱ ثانیه\r\n+ محدودیت حافظه: ۲۵۶ مگابایت\r\n\r\n----------\r\nبرنامه‌ای بنویسید که عدد $n$ را از ورودی گرفته و فاکتوریل آن را محاسبه کرده و نمایش دهد…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/event.json:26 · Hidden zero-width characters detected — may conceal content
AST07"name": "ستاد توسعه اقتصاد دانش‌بنیان دیجیتال"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/wp_categories.json:1 · Hidden zero-width characters detected — may conceal content
AST07[{"id": 64, "name": "پایتون", "slug": "python"}, {"id": 46, "name": "توسعه‌دهنده", "slug": "developer"}, {"id": 48, "name": "تکنولوژی", "slug": "technology…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/wp_posts.json:1 · Hidden zero-width characters detected — may conceal content
AST07…اوا اسکریپت چیست؟ ۱۱ کاربرد مهم JS در ۱۴۰۵"}, "excerpt": {"rendered": "<p>برنامه‌نویسان سراسر جهان از زبان جاوا اسکریپت برای ساخت محتوای تعاملی و پویا در اپلیکیش…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/companies.json:1 · Hidden zero-width characters detected — may conceal content
AST07…f7629125e.png", "open_job_count": 3, "tagline": "ما در مهیمن فنـاوری را توسعه می‌دهیم و با کمک آن راهکار می‌سازیم.", "city": {"name": "تهران"}, "size": "۵۰۱-۱۰۰۰…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/contest.json:1 · Hidden zero-width characters detected — may conceal content
AST07…داده، حل مسئله و ساخت راهکارهای فنی علاقه دارید، Code Kitchen فرصتی است تا مهارت‌های خود را در یک رقابت تخصصی به چالش بکشید.", "featured_card_logo": "/media/publ…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.Cost to the agent
Instructions loaded
≈64 tok
1 file · 36 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
Not checked against OSV yet; the weekly check has not reached this version.