patent-writer-agent

该技能目的与主要能力基本一致：文档转换、专利检索、生成专利草稿都服务于专利写作。静态扫描列出的 command_injection 基本是文档模板误报，不构成载入时命令执行。主要风险在于先执行未展示内容的 init.sh，以及把 SERPAPI_API_KEY 经 mcporter 转发给第三方 google-patents-mcp 工具，造成中等供应链与凭证暴露风险。整体更适合判定为 SUSPICIOUS 而非 MALICIOUS。

No explicit malicious behavior is present in the supplied configuration. It does introduce a moderate supply-chain risk because npx automatically downloads and executes unpinned packages with confirmation disabled, and those packages receive API keys. Pin trusted package versions, use lockfiles or integrity verification where supported, and restrict the credentials' permissions.