Is nihaixia safe to install?

Security audit of jangviktor-web/nihaixia · MCP Server by jangviktor-web · ★ 3.9k

⚠ CAUTION Basic audit · rule-based scan · 43 published rules

Use with caution — nihaixia triggered warning flags in AgentSkillsHub's security scan. It may be fine for personal trials, but review its credential handling and maintainer before brand or production use.

What it is: 倪海厦视角的中医Agent Skill，基于倪海厦教学资料开发，蒸馏倪师伤寒论、金匮要略、黄帝内经、神农本草经、针灸篇等，人纪/医案/经方思维，六经辨证，八纲辨证，天机道，天纪，紫微斗数，易经，阴阳，八卦，五行，风水，地纪等，总结8个诊断公式+快速诊断流程图+脉舌速查+七步走思维模式，蒸馏129条伤寒论 · 23篇金匮 · 72篇黄帝内经 · 神农本草经374种本草（上137/中110/下127） · 1257 例结构化案例 + 243 例叙事医案 · 2,452页讲义。

Red flags detected (1)

🚩 fenced download exec

Audit summary

Security grade	⚠ CAUTION
Quality score	60/100
GitHub stars	3.9k
Language	HTML
Last updated	2026-10-28

Check before you install

What credentials does it ask for, and where are they stored?
Is the maintainer identifiable and the repo actively maintained?
Read the install scripts and network calls before trusting it.

Run a live scan → Full details & install 5-dimension deep audit

Related MCP Server audits

Is rea safe? — SAFE · ★ 446.4k
Is ECC safe? — SAFE · ★ 299.8k
Is n8n safe? — SAFE · ★ 209.9k
Is dify safe? — SAFE · ★ 160.8k
Is open-webui safe? — SAFE · ★ 157.6k
Is cc-switch safe? — SAFE · ★ 153.0k

Browse all MCP Server skills →

This is AgentSkillsHub's free basic audit: an automated rule-based scan with 43 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more), applied the same way to every open-source AI agent skill and MCP server we grade and refreshed every 8 hours. A CAUTION grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-10-28.