tencentcloud-cos

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell scripts (setup.sh) to automate the installation of dependencies and the configuration of the local environment. This includes setting up the mcporter CLI and cos-mcp server.
  • [EXTERNAL_DOWNLOADS]: The skill installs standard Node.js packages (cos-mcp, cos-nodejs-sdk-v5, mcporter) from the NPM registry and the coscmd Python package from PyPI during the setup process.
  • [CREDENTIALS_SAFE]: The skill guides the user to provide their Tencent Cloud API credentials (SecretId, SecretKey) and stores them in the user's shell profile (~/.zshrc or ~/.bashrc) and the ~/.mcporter/mcporter.json configuration file. This is a standard practice for developer tools requiring cloud access.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 03:23 PM