Is Bilibili Huasheng Video MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
What to know before installing
- highcurl | sh in a script
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
1 high
- Code scan2 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- highcurl | sh in a script
install.curl-pipebin/hs.js: …hs directly, without npm:\n" + " curl -fsSL https://raw.githubusercontent.com/superlcr/huasheng-cli/main/install.sh | sh" ); process.exit(1); } const r = s…
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Bilibili Huasheng Video does
VynlyPublish AI images & video to Vynly, the AI-only social feed. Verified provenance, no signup.not reviewedGrowingB- proofcutLocal-first AI video editor: recordings to a finished film, cut by transcript, then verifiednot reviewedGrowingC
ArsazeAI-native video editing OS — timeline editing, generation, color, and export as MCP tools.not reviewedGrowingA