Skip to main content

hap-v3-api

Provides a comprehensive guide for using the Mingdao HAP V3 API to build pages and manipulate data effectively.

Install this skill

or
5/100

Security score

The hap-v3-api skill was audited on Feb 27, 2026 and we found 39 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 239

Template literal with variable interpolation in command context

SourceSKILL.md
239console.log(`未找到 ${currentIDE} 的 MCP 配置文件`);
medium line 260

Template literal with variable interpolation in command context

SourceSKILL.md
260console.log(`✅ 从 ${currentIDE} 的 MCP 配置中提取到鉴权信息`);
low line 81

Fetch to external URL

SourceSKILL.md
81// fetch('https://api.mingdao.com/v3/open/worksheet/getFilterRows', ...)
medium line 139

Access to hidden dotfiles in home directory

SourceSKILL.md
139- 检查配置目录:`~/.cursor`, `~/.claude`, `~/.trae` 等是否存在
medium line 149

Access to hidden dotfiles in home directory

SourceSKILL.md
149| **Claude Code** | `~/.claude/config.json` 或通过 `claude mcp list` 命令 | `.claude/config.json` |
medium line 150

Access to hidden dotfiles in home directory

SourceSKILL.md
150| **Cursor** | `~/.cursor/mcp.json` 或 `~/Library/Application Support/Cursor/User/settings.json` (macOS) | `.cursor/mcp.json` |
medium line 151

Access to hidden dotfiles in home directory

SourceSKILL.md
151| **TRAE** | `~/.trae/mcp.json` | `.trae/mcp.json` |
medium line 152

Access to hidden dotfiles in home directory

SourceSKILL.md
152| **GitHub Copilot** | `~/.copilot/mcp.json` | `.github/mcp.json` |
medium line 153

Access to hidden dotfiles in home directory

SourceSKILL.md
153| **Antigravity** | `~/.gemini/antigravity/config.json` | `.agent/config.json` |
medium line 154

Access to hidden dotfiles in home directory

SourceSKILL.md
154| **OpenCode** | `~/.config/opencode/mcp.json` | `.opencode/mcp.json` |
medium line 155

Access to hidden dotfiles in home directory

SourceSKILL.md
155| **Windsurf** | `~/.codeium/windsurf/mcp.json` | `.windsurf/mcp.json` |
medium line 156

Access to hidden dotfiles in home directory

SourceSKILL.md
156| **Gemini CLI** | `~/.gemini/config.json` | `.gemini/config.json` |
medium line 157

Access to hidden dotfiles in home directory

SourceSKILL.md
157| **Codex** | `~/.codex/config.toml` | `.codex/config.toml` |
medium line 158

Access to hidden dotfiles in home directory

SourceSKILL.md
158| **Manus** | `~/.manus/mcp.json` | - |
medium line 159

Access to hidden dotfiles in home directory

SourceSKILL.md
159| **Coze** | `~/.coze/mcp_config.json` | - |
low line 193

Access to .env file

SourceSKILL.md
193const termProgram = process.env.TERM_PROGRAM;
low line 199

Access to .env file

SourceSKILL.md
199if (process.env.CLAUDE_SESSION) return 'claude';
low line 200

Access to .env file

SourceSKILL.md
200if (process.env.TRAE_SESSION) return 'trae';
low line 201

Access to .env file

SourceSKILL.md
201if (process.env.ANTIGRAVITY_SESSION) return 'antigravity';
low line 204

Access to .env file

SourceSKILL.md
204const homeDir = process.env.HOME || process.env.USERPROFILE;
low line 215

Access to .env file

SourceSKILL.md
215const homeDir = process.env.HOME || process.env.USERPROFILE;
low line 81

External URL reference

SourceSKILL.md
81// fetch('https://api.mingdao.com/v3/open/worksheet/getFilterRows', ...)
low line 106

External URL reference

SourceSKILL.md
106| **明道云 HAP** | `https://api.mingdao.com` | 官方 SaaS 服务 |
low line 107

External URL reference

SourceSKILL.md
107| **Nocoly HAP** | `https://www.nocoly.com` | Nocoly SaaS 服务 |
low line 108

External URL reference

SourceSKILL.md
108| **私有部署 HAP** | `https://your-domain.com/api` | ⚠️ **注意:私有部署需要在域名后加 `/api`** |
low line 111

External URL reference

SourceSKILL.md
111- 明道云:`https://api.mingdao.com/v3/open/worksheet/getFilterRows`
low line 112

External URL reference

SourceSKILL.md
112- Nocoly:`https://www.nocoly.com/v3/open/worksheet/getFilterRows`
low line 113

External URL reference

SourceSKILL.md
113- 私有部署:`https://p-demo.mingdaoyun.cn/api/v3/open/worksheet/getFilterRows` ← 注意 `/api`
low line 175

External URL reference

SourceSKILL.md
175"url": "https://api.mingdao.com/mcp?HAP-Appkey=6802bfa5da37d75f&HAP-Sign=MWZmZWU1YmMyMzE4ZTAxYjY3NTViYjM5NzhlNTdhOTIwZWFhYTc2Y2I2YzljNWMzNDFmMjk4NTM2N2M0YTg2OA=="
low line 333

External URL reference

SourceSKILL.md
333- [API 整体介绍](https://apifox.mingdao.com/7271706m0.md)
low line 334

External URL reference

SourceSKILL.md
334- [字段类型对照表](https://apifox.mingdao.com/7271709m0.md)
low line 335

External URL reference

SourceSKILL.md
335- [筛选器使用指南](https://apifox.mingdao.com/7271713m0.md)
low line 336

External URL reference

SourceSKILL.md
336- [错误码说明](https://apifox.mingdao.com/7271715m0.md)
low line 575

External URL reference

SourceSKILL.md
575"url": "https://example.com/brochure.pdf"
low line 586

External URL reference

SourceSKILL.md
586"downloadUrl": "https://...", // ⚠️ 使用 downloadUrl
low line 1042

External URL reference

SourceSKILL.md
1042- [API 整体介绍](https://apifox.mingdao.com/7271706m0.md)
low line 1043

External URL reference

SourceSKILL.md
1043- [字段类型对照表](https://apifox.mingdao.com/7271709m0.md)
low line 1044

External URL reference

SourceSKILL.md
1044- [筛选器使用指南](https://apifox.mingdao.com/7271713m0.md)
low line 1045

External URL reference

SourceSKILL.md
1045- [错误码说明](https://apifox.mingdao.com/7271715m0.md)
Scanned on Feb 27, 2026
View Security Dashboard
Installation guide →