cloudbase

Fail

Audited by Runlayer on Mar 13, 2026

Risk Level: HIGH
Scan Summary
Max Score
92%
Files
42
Flagged
13
Chunks
67
Flagged Files (13)
cloudbase/references/auth-nodejs/SKILL.mdHIGH
92.4%

Tool passed security scan

Risky tool definition detected

For end‑to‑end experiences, pair this skill with: - Web‑side auth documentation (for all browser‑side login and UX using `@cloudbase/js-sdk`).

cloudbase/references/http-api/SKILL.mdHIGH
91.4%

Tool passed security scan

Data Exfiltration

Context Poisoning

Risky tool definition detected

**Verification flow**: Save `verification_id` from send step, use it in verify step

cloudbase/SKILL.mdMEDIUM
83.4%

Prompt Injection

Privilege Escalation

Shadow Persistence

Context Poisoning

Supply Chain Compromise

cloudbase/references/cloud-functions/SKILL.mdMEDIUM
80.3%

Tool passed security scan

Privilege Escalation

Context Poisoning

Supply Chain Compromise

cloudbase/references/cloudbase-agent-ts/adapter-langgraph.mdMEDIUM
76.2%

Supply Chain Compromise

cloudbase/references/no-sql-wx-mp-sdk/aggregation.mdLOW
74.5%

Tool passed security scan

Risky tool definition detected

Description: .aggregate() .match({ timestamp: db.command.gte(new Date(Date.now() - 30 * 24 * 60 * 60 * 1000)) }) .group({ _id: '$userId', actionCount: { $sum: 1 }, lastAction: { $max: '$timestamp' }, actions: { $push: '$actionType' } }) .sort({ actionCount: -1 }) .limit(20) .end(); ``` ## Error Handling Always handle aggregation errors: ```javascript try { const result = await db.collection('orders') .aggregate() .group({ _id: '$category', total: { $sum: '$amount' } }) .end(); if (result.list.le

cloudbase/references/no-sql-web-sdk/aggregation.mdLOW
72.1%

Tool passed security scan

Risky tool definition detected

Description: .aggregate() .match({ timestamp: db.command.gte(new Date(Date.now() - 30 * 24 * 60 * 60 * 1000)) }) .group({ _id: '$userId', actionCount: { $sum: 1 }, lastAction: { $max: '$timestamp' }, actions: { $push: '$actionType' } }) .sort({ actionCount: -1 }) .limit(20) .end(); ``` ## Error Handling Always handle aggregation errors: ```javascript try { const result = await db.collection('orders') .aggregate() .group({ _id: '$category', total: { $sum: '$amount' } }) .end(); if (result.list.le

cloudbase/references/cloudbase-agent-ts/adapter-langchain.mdLOW
71.3%

Shadow Persistence

Supply Chain Compromise

cloudbase/references/auth-web/SKILL.mdLOW
65.4%

Tool passed security scan

cloudbase/references/miniprogram-development/SKILL.mdLOW
62.0%

Tool passed security scan

cloudbase/references/cloudbase-platform/SKILL.mdLOW
61.7%

Tool passed security scan

cloudbase/references/cloudrun-development/SKILL.mdLOW
51.4%

Tool passed security scan

cloudbase/references/no-sql-web-sdk/security-rules.mdLOW
51.0%

Tool passed security scan

Passed Files (29)Click to expand
cloudbase/references/cloudbase-agent-ts/ui-clients.mdOK
49.1%

Tool passed security scan

cloudbase/references/ai-model-web/SKILL.mdOK
46.7%

Tool passed security scan

cloudbase/references/auth-wechat/SKILL.mdOK
46.3%

Tool passed security scan

cloudbase/references/relational-database-web/SKILL.mdOK
43.5%

Tool passed security scan

cloudbase/references/ai-model-nodejs/SKILL.mdOK
42.4%

Tool passed security scan

cloudbase/references/ai-model-wechat/SKILL.mdOK
40.0%

Tool passed security scan

cloudbase/references/no-sql-web-sdk/geolocation.mdOK
35.4%

Tool passed security scan

cloudbase/references/no-sql-wx-mp-sdk/geolocation.mdOK
34.9%

Tool passed security scan

cloudbase/references/no-sql-wx-mp-sdk/crud-operations.mdOK
34.0%

Tool passed security scan

cloudbase/references/cloudbase-agent-ts/adapter-development.mdOK
33.7%

Tool passed security scan

cloudbase/references/cloud-storage-web/SKILL.mdOK
33.2%

Tool passed security scan

cloudbase/references/ui-design/SKILL.mdOK
31.6%

Tool passed security scan

cloudbase/references/cloudbase-agent-ts/SKILL.mdOK
31.4%

Tool passed security scan

cloudbase/references/web-development/SKILL.mdOK
23.9%

Tool passed security scan

cloudbase/references/auth-tool/SKILL.mdOK
22.4%

Tool passed security scan

cloudbase/references/no-sql-web-sdk/crud-operations.mdOK
20.1%

Tool passed security scan

cloudbase/references/no-sql-web-sdk/realtime.mdOK
19.4%

Tool passed security scan

cloudbase/references/data-model-creation/SKILL.mdOK
18.7%

Tool passed security scan

cloudbase/references/spec-workflow/SKILL.mdOK
17.7%

Tool passed security scan

cloudbase/references/no-sql-wx-mp-sdk/SKILL.mdOK
17.5%

Tool passed security scan

cloudbase/references/cloudbase-agent-ts/server-quickstart.mdOK
15.8%

Tool passed security scan

cloudbase/references/relational-database-tool/SKILL.mdOK
13.7%

Tool passed security scan

cloudbase/references/no-sql-web-sdk/SKILL.mdOK
10.6%

Tool passed security scan

cloudbase/references/cloudbase-agent-ts/ui-miniprogram.mdOK
10.2%

Tool passed security scan

cloudbase/references/cloudbase-agent-ts/agui-protocol.mdOK
4.0%

Tool passed security scan

cloudbase/references/no-sql-wx-mp-sdk/complex-queries.mdOK
2.8%

Tool passed security scan

cloudbase/references/no-sql-web-sdk/complex-queries.mdOK
2.8%

Tool passed security scan

cloudbase/references/no-sql-web-sdk/pagination.mdOK
1.5%

Tool passed security scan

cloudbase/references/no-sql-wx-mp-sdk/pagination.mdOK
1.4%

Tool passed security scan

Audit Metadata
Max File Score
92%
Classification
UNKNOWN_SERVER
Files Scanned
42
Files Flagged
13
Chunks Analyzed
67
Analyzed
Mar 13, 2026, 03:22 AM
Security Audit — runlayer — cloudbase