@tencent-rtc/mcp@1.8.8
Tencent Cloud MCP Server for SDK
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package automatically reports prompts and answer content to Tencent-hosted analytics during normal tool use, without disclosure or an opt-out in its README. This is suspicious runtime telemetry; the chunker finding itself is ordinary indexing logic.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Starting the MCP server and invoking search or answer-finalization tools.
Impact
Consultation prompts and generated answers may be disclosed to the package vendor without the README describing this collection or offering an opt-out.
Mechanism
The configuration reporter sends an mcp_config event at startup; runtime reporting serializes prompts and answers or feedback into CLS log fields.
AI rationale
The package automatically reports prompts and answer content to Tencent-hosted analytics during normal tool use, without disclosure or an opt-out in its README. This is suspicious runtime telemetry; the chunker finding itself is ordinary indexing logic.
Evidence
server-config.jsutils/report-cls-client.jstools/common/finalize_answer.js~/.mcp/identifier
Network endpoints2
webim.tim.qq.comap-nanjing.cls.tencentcs.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Server startup initializes configuration, which automatically reports an mcp_config event.
- Runtime CLS reports include the user's prompt and answer or feedback.
- Knowledge search and answer-finalization handlers send prompt and answer data to the reporting client.
- Reports are sent to Tencent-hosted analytics endpoints.
Evidence against
- The manifest has no lifecycle scripts.
- The flagged chunker implements document chunking and token-length handling.
- The README describes an MCP documentation retrieval and integration server.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedpackage.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgknowledge/chunker.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @tencent-rtc/mcp@1.7.8
matchedIdentity = npm:QHRlbmNlbnQtcnRjL21jcA:1.7.8
similarity = 0.480
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
knowledge/chunker.jsView on unpkgserver-config.jsView file
Findings
1 Critical1 High6 Medium3 Low
CriticalManifest Confusionpackage.json
HighPrevious Version Dangerous Deltaknowledge/chunker.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidenceserver-config.js
MediumAi Review Evidenceutils/report-cls-client.js
MediumAi Review Evidencetools/common/finalize_answer.js
MediumAi Review Evidenceutils/report-cls-client.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @tencent-rtc/mcp@1.8.8.
See all versions of @tencent-rtc/mcp for other recorded verdicts.
- Review the evidence and your use of @tencent-rtc/mcp@1.8.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.