
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
yingdao-mcp-server-community
Advanced tools
社区维护的影刀 RPA MCP Server,支持两种运行模式:STDIO 与 SSE/HTTP。相比原仓库,提供更易用的安装与分发(npm/tgz)、更完整的工具与参数支持,并保持与 MCP 客户端的良好集成。
LANGUAGE(默认 zh)。>= 18。SHADOWBOT_PATH、USER_FOLDER。queryApplist:查询应用列表。queryRobotParam:查询应用参数。runApp:启动应用并传参(目前仅部分 Windows 环境支持传参,macOS 暂不支持)。ACCESS_KEY_ID、ACCESS_KEY_SECRET。queryApplist:查询应用列表。queryRobotParam:查询应用参数。uploadFile:上传文件。startJob:启动应用任务(支持对象参数自动转换)。queryJob:查询任务执行结果。queryClientList:查询调度 RPA 机器人列表。SHADOWBOT_PATH
E:\Program Files\ShadowBot\ShadowBot.exe/Applications/影刀.appUSER_FOLDER: 用户文件夹路径(在影刀设置中查看)ACCESS_KEY_ID:影刀控制台获取ACCESS_KEY_SECRET:影刀控制台获取mcpServers 中设置 command/args 与 env。mcpServers 使用 type: "sse" 与 url。LANGUAGE:多语言(默认 zh),如 en。RPA_MODEL:运行模式(默认 local)。
local:需要 SHADOWBOT_PATH 与 USER_FOLDER。openapi:需要 ACCESS_KEY_ID 与 ACCESS_KEY_SECRET。SHADOWBOT_PATH:影刀客户端路径(macOS 下可能为 ShadowBot.app 或 影刀.app,以本机实际为准)。USER_FOLDER:影刀用户目录(用于定位 apps/ 及日志)。ACCESS_KEY_ID / ACCESS_KEY_SECRET:开放 API 访问凭据。SERVER_PORT:SSE/HTTP 服务端口(默认 3000)。// macos
{
"mcpServers": {
"yingdao": {
"command": "npx",
"args": ["yingdao-mcp-server-community"],
"env": {
"LANGUAGE": "zh",
"RPA_MODEL": "local",
"SHADOWBOT_PATH": "/Applications/Shadowbot.app",
"USER_FOLDER": "/Users/<you>/Library/Application Support/Shadowbot/user/<用户id>"
}
}
}
}
npm i -g yingdao-mcp-server-communityRPA_MODEL=local SHADOWBOT_PATH="/Applications/Shadowbot.app" USER_FOLDER="/Users/<you>/Library/Application Support/Shadowbot/user/{用户id}" yingdao-mcp-server-community --serverRPA_MODEL=openapi ACCESS_KEY_ID="<id>" ACCESS_KEY_SECRET="<secret>" SERVER_PORT=3000 yingdao-mcp-server-community --server{
"mcpServers": {
"yingdao": {
"type": "sse",
"url": "http://localhost:3000/sse",
"autoReconnect": true,
"retryLimit": null
}
}
}

原仓库:https://github.com/ying-dao/yingdao_mcp_server
许可证:MIT
FAQs
Mcp server for yingdao rpa, both sse and stdio mode
The npm package yingdao-mcp-server-community receives a total of 3 weekly downloads. As such, yingdao-mcp-server-community popularity was classified as not popular.
We found that yingdao-mcp-server-community demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.