MongoDB Skill - 灵活的文档数据库管理

The name/description (MongoDB management) matches the declared requirements: mongosh, mongodump, mongorestore, and pymongo are reasonable and expected for the documented features (queries, aggregation, backups, restore, indexing, geospatial).

SKILL.md contains typical MongoDB commands and examples (connection strings, find/aggregate/update examples, mongodump/mongorestore). It does include examples with plaintext connection strings (username:password) but does not instruct the agent to read unrelated files, exfiltrate data, or call third‑party endpoints. Recommend users avoid pasting production credentials into public inputs and use least‑privilege accounts.

No embedded install script that downloads arbitrary archives. package.json lists system installs (apt, brew) and pip install for pymongo — these are standard package managers and appropriate for the skill. No suspicious external URLs or extract-from-unknown-host steps are present.

The skill does not require environment variables or secrets in its metadata. However, practical use requires supplying MongoDB connection strings/credentials to connect to databases; this is expected but users should provide only minimal-permission credentials and avoid exposing secrets to untrusted interfaces.

always is false and the skill is user-invocable; it does not request persistent system-wide privileges or modify other skills. There is no evidence it attempts to alter agent/system configuration beyond normal install recommendations.