Skills/npm/cloudbase-mcp

cloudbase-mcp@2.36.1

CAUTION

Publisher claims: "CloudBase MCP Server — operate Tencent CloudBase (database, auth, functions, storage, hosting) from AI coding tools via the Model Context Protocol. Part of CloudBase AI Toolkit." Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher cloudbase · joined 0 days agoInstalls 93,978Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH

npx invocation of non-well-known packageREADME.md:64 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.zh-CN.md:79 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commandpackage.json:47 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packageREADME.zh-CN.md:64 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:111 · npx invocation of non-well-known package — may execute untrusted code

AST06