
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
智能题目生成和审核系统 - Model Context Protocol (MCP) 服务
npm install xiaoguai-question-mcp
或全局安装:
npm install -g xiaoguai-question-mcp
npx xiaoguai-question-mcp init
根据提示选择环境和配置API Token。
# 开发环境
npx xiaoguai-question-mcp start
# 生产环境
npx xiaoguai-question-mcp start --env prod
npx xiaoguai-question-mcp test
npx xiaoguai-question-mcp generate
创建 .env 文件:
# 环境:development(开发)或 production(生产)
NODE_ENV=development
# API Token - 请填写您自己的token
API_TOKEN=your_api_token_here
# 日志级别
LOG_LEVEL=info
VERBOSE=false
http://127.0.0.1:8000https://ask.he29.com获取支持的题目类型列表
输入:无
输出:
{
"success": true,
"data": [
{
"type": 1,
"name": "单选题",
"min_options": 2,
"max_options": 6
}
]
}
生成题目大纲整理提示词
输入:
{
"question_type": 1,
"topic": "JavaScript闭包",
"difficulty": 3,
"custom_requirements": "需要实际代码示例"
}
输出:
{
"success": true,
"prompt": "# 题目大纲整理\n...",
"metadata": {
"question_type": 1,
"topic": "JavaScript闭包",
"difficulty": 3
}
}
生成细节补充提示词
输入:
{
"question_type": 1,
"topic": "JavaScript闭包",
"difficulty": 3,
"outline": "整理后的大纲内容...",
"user_feedback": "需要更多实例"
}
生成完整题目生成提示词
输入:
{
"question_type": 1,
"topic": "JavaScript闭包",
"difficulty": 3,
"enhanced_outline": "增强后的大纲内容...",
"custom_requirements": "包含代码示例"
}
保存题目到数据库
输入:
{
"question_data": {
"question_type": 1,
"title": "以下关于JavaScript闭包的描述,哪个是正确的?",
"description": "考察对闭包概念的理解",
"difficulty": 3,
"category": "JavaScript",
"options": [
{"text": "闭包是函数和其词法环境的组合", "is_correct": 1},
{"text": "闭包只能在全局作用域中创建", "is_correct": 0},
{"text": "闭包不能访问外部变量", "is_correct": 0},
{"text": "闭包会导致内存泄漏", "is_correct": 0}
],
"correct_answer": "A",
"explanation": "闭包是函数和其声明时所在的词法环境的组合...",
"hint": "考虑函数作用域和变量访问"
},
"category_id": 1
}
输出:
{
"success": true,
"data": {
"id": 123,
"question_id": "q_20250118_abc123",
"message": "题目保存成功"
}
}
批量保存题目
更新题目
删除题目
获取题目详情
获取题目分类列表
生成题目重新完善提示词
生成答案核实提示词
1. 用户选择题型和主题
↓
2. MCP生成大纲整理提示词 (generate_outline_prompt)
↓
3. 大模型整理大纲
↓
4. 用户确认大纲
↓
5. MCP生成细节补充提示词 (generate_detail_prompt)
↓
6. 大模型补充细节
↓
7. 用户确认细节
↓
8. MCP生成题目生成提示词 (generate_question_prompt)
↓
9. 大模型生成题目
↓
10. 用户核验题目
↓
11. MCP保存题目到数据库 (save_question)
如果题目不正确,可以:
generate_refine_prompt 生成重新完善提示词generate_verify_prompt 生成答案核实提示词delete_question 删除当前题目{
"question_type": 1,
"title": "题目内容",
"difficulty": 3,
"category": "分类名称",
"options": [
{"text": "选项A", "is_correct": 1},
{"text": "选项B", "is_correct": 0},
{"text": "选项C", "is_correct": 0},
{"text": "选项D", "is_correct": 0}
],
"correct_answer": "A",
"explanation": "答案解析"
}
{
"question_type": 2,
"title": "题目内容(多选)",
"options": [
{"text": "选项A", "is_correct": 1},
{"text": "选项B", "is_correct": 1},
{"text": "选项C", "is_correct": 0},
{"text": "选项D", "is_correct": 0}
],
"correct_answer": "AB"
}
{
"question_type": 3,
"title": "判断陈述",
"options": [
{"text": "正确", "is_correct": 1},
{"text": "错误", "is_correct": 0}
],
"correct_answer": "A"
}
{
"question_type": 4,
"title": "题目内容,用____表示填空",
"options": [],
"correct_answer": "标准答案"
}
{
"question_type": 5,
"title": "将以下选项按正确顺序排列",
"options": [
{"text": "第一项", "is_correct": 0, "correct_order": 1},
{"text": "第二项", "is_correct": 0, "correct_order": 2},
{"text": "第三项", "is_correct": 0, "correct_order": 3}
],
"correct_answer": "1-2-3"
}
# 克隆项目
git clone <repository-url>
# 安装依赖
cd mcp
npm install
# 开发模式
npm run dev
# 测试
npm run test
MIT License
FAQs
Question Maker MCP - AI-powered question generation and management system
We found that qmaker-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.