render-mcp
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow to fetch and process external content from official Render documentation URLs. This pattern introduces a surface where the agent follows instructions found in remote documents.
- Ingestion points: Reference files point to Markdown and HTML documentation hosted at
https://render.com/docs/(specificallymcp-server.md,cli.md, andcli-reference.md). - Boundary markers: No specific delimiters or XML tags are specified to wrap the fetched external content; the skill relies on the agent's internal capability to distinguish the retrieved document from the core instructions.
- Capability inventory: The skill allows for shell command execution through the
renderCLI and theclaudeMCP management tool. - Sanitization: Content fetched via
curlis intended to be read directly without specific filtering or schema validation beyond manual inspection by the agent. - [EXTERNAL_DOWNLOADS]: Fetches documentation and configuration guidelines directly from the vendor's official web domains using
curlto ensure setup instructions remain current. - [COMMAND_EXECUTION]: Instructs the agent on using the
renderCLI for authentication and workspace management, and theclaudecommand-line tool for adding the MCP server configuration. All suggested commands are standard for platform integration and use non-interactive output flags.
Audit Metadata