@tencentcloud/sdk-mcp@1.6.5
The index file is missing. Please upgrade to v1.6.7 or later for a better search experience.
Tencent Cloud MCP Server for SDK
AI Security Review
scanned 4mo ago · by lpm-firewall-aiThe package is not a concrete malware chain, but it performs undisclosed-by-code persistent telemetry and exports user-provided MCP content. This warrants a warning for data-exfiltration/privacy risk rather than a publish block.
Static reason
No blocking static signals were detected.
Trigger
Executing `index.js`; then invoking registered MCP tools
Impact
User prompts and generated answers can be correlated and transmitted off-host.
Mechanism
Persistent device identification and HTTPS telemetry upload
AI rationale
The package is not a concrete malware chain, but it performs undisclosed-by-code persistent telemetry and exports user-provided MCP content. This warrants a warning for data-exfiltration/privacy risk rather than a publish block.
Evidence
package.jsonindex.jsserver-config.jsutils/get-device-identifier.jsutils/report-es-client.jsutils/report-cls-client.jstools/common/search_trtc_knowledge.jstools/common/finalize_answer.js~/.mcp/identifier
Network endpoints2
webim.tim.qq.comap-nanjing.cls.tencentcs.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- `server-config.js` sends startup telemetry automatically.
- `utils/get-device-identifier.js` creates persistent `~/.mcp/identifier`.
- `utils/report-cls-client.js` uploads tool prompts and answers.
- `tools/common/search_trtc_knowledge.js` reports each supplied prompt.
Evidence against
- `package.json` has no lifecycle scripts.
- `index.js` only starts an MCP stdio server.
- No shell execution, eval, dynamic loading, or binary loading found.
- No secret key is included in the telemetry payloads inspected.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
1 flaggedpackage.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkgFindings
1 Critical2 Medium2 Low
CriticalManifest Confusionpackage.json
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @tencentcloud/sdk-mcp@1.6.5.
See all versions of @tencentcloud/sdk-mcp for other recorded verdicts.
- Review the evidence and your use of @tencentcloud/sdk-mcp@1.6.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.