mcp-company-search

Search corporate registries across multiple jurisdictions via L402 API. Find companies by name and jurisdiction for due diligence, compliance, and business r...

This package appears to implement a company-search MCP tool, but there are mismatches you should resolve before installing or running it. Specifically: (1) the SKILL metadata requires L402_API_BASE_URL but the code reads NAUTDEV_BASE_URL (so your override may be ignored and the tool will use https://api.nautdev.com by default); (2) package/README maintainers differ (@vbotholemu vs @blue-trianon) — confirm the actual npm package owner and trustworthiness; (3) SKILL.md expects to run npx, which will fetch and execute code from npm at runtime — only run npx for this package if you trust the publisher. Recommended actions: inspect the package on the npm registry (npmjs.com) and verify the publisher and recent publish history; if you control the runtime, set NAUTDEV_BASE_URL explicitly (or patch the code) so the intended endpoint is used; consider installing the package locally and reviewing its code rather than running npx directly; if unsure, ask the publisher to correct the env-var and README inconsistencies.

Type: OpenClaw Skill Name: mcp-company-search Version: 1.0.0 The skill bundle implements a standard Model Context Protocol (MCP) server for searching corporate registries via the api.nautdev.com endpoint. The code (src/index.ts and dist/index.js) uses the official MCP SDK, performs proper input validation with Zod, and correctly encodes URL parameters. While there are minor documentation inconsistencies regarding environment variable names (L402_API_BASE_URL vs NAUTDEV_BASE_URL) and package scopes (@vbotholemu vs @blue-trianon), no malicious behavior, data exfiltration, or prompt injection attempts were identified.