cloudbase-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the user or agent to run shell commands via
npxto execute the@cloudbase/cloudbase-mcpserver and interact with themcportertool manager. It also provides instructions for modifying the localmcporter.jsonconfiguration file to register the server.\n- [EXTERNAL_DOWNLOADS]: The instructions involve downloading and executing the@cloudbase/cloudbase-mcppackage from the npm registry. It also provides links to official source code repositories on GitHub and cnb.cool, which are managed by the verified vendor (tencentcloudbase).\n- [INDIRECT_PROMPT_INJECTION]: The workflow for calling tools and reading schemas introduces a surface where external data is ingested into the agent context.\n - Ingestion points: Data returned from tools via
mcporter calland tool definitions frommcporter describeas referenced inSKILL.md.\n - Boundary markers: The instructions do not specify the use of delimiters or warnings to the agent to ignore potentially malicious instructions embedded in tool outputs.\n
- Capability inventory: The skill allows the agent to execute
npxand other shell commands within the host environment.\n - Sanitization: There is no mention of filtering, escaping, or validating tool outputs before they are processed by the agent.
Audit Metadata