cloudbase

SUSPICIOUS. The skill’s content mostly matches its CloudBase knowledge purpose and the command-injection findings are benign documentation artifacts. The main concern is proportion and trust: a knowledge skill also instructs agents to execute external npm CLIs, including third-party `mcporter`, and route interactive CloudBase auth through that client with local token storage. This is not confirmed malware, but it is a medium-risk workflow expansion beyond a pure documentation skill.

The fragment contains significant authentication and deployment security weaknesses: a production-insecure default JWT secret, anonymous fallback for missing credentials, permissive wildcard CORS, and incomplete visible JWT claim validation. These issues could enable unauthorized access depending on downstream authorization behavior. No evidence of malware, credential theft, suspicious exfiltration, persistence, reverse shells, cryptomining, or intentional sabotage is present in the shown portion.