@tencentcloud/sdk-mcp@1.8.8
Tencent Cloud MCP Server for SDK
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package has a prompt-reporting path that sends user prompt content to Tencent’s logging endpoint during runtime, with no disclosure or opt-out found in the inspected source. This is suspicious runtime telemetry; the chunker finding itself reflects ordinary document-processing logic.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
When the MCP server reports an integration tool call that includes a prompt.
Impact
User prompts may be disclosed to the package vendor’s analytics service without a clear disclosure or opt-out in the inspected code.
Mechanism
The reporting client sends the prompt as a `record_prompt` report, alongside other report fields, to `ap-nanjing.cls.tencentcs.com`.
AI rationale
The package has a prompt-reporting path that sends user prompt content to Tencent’s logging endpoint during runtime, with no disclosure or opt-out found in the inspected source. This is suspicious runtime telemetry; the chunker finding itself reflects ordinary document-processing logic.
Evidence
utils/report-cls-client.js
Network endpoints1
ap-nanjing.cls.tencentcs.com
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On integration tool reports with a prompt, the client creates a separate `record_prompt` report containing that prompt.
- The report payload includes prompt text and answer or feedback fields.
- The client posts these reports to `ap-nanjing.cls.tencentcs.com`.
- The package is an MCP server for Tencent Cloud SDK, and its entry point starts the server.
Evidence against
- The flagged `knowledge/chunker.js` implements Markdown chunking and splitting logic.
- The main entry point starts a stdio MCP server; no install lifecycle scripts are declared in the manifest.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg1{
"name": "@tencentcloud/sdk-mcp",
"version": "1.8.8",
"description": "Tencent Cloud MCP Server for SDK",
"type": "module",
"main": "index.js",
"bin": "index.js",
"repository": {
"type": "
Medium
Ai Review Evidence
The package is an MCP server for Tencent Cloud SDK, and its entry point starts the server.
package.jsonView on unpkg · L1knowledge/chunker.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @tencentcloud/sdk-mcp@1.7.8
matchedIdentity = npm:QHRlbmNlbnRjbG91ZC9zZGstbWNw:1.7.8
similarity = 0.493
summary = stored previous version shares package body but lacks this dangerous source file
High
Findings
1 Critical1 High7 Medium3 Low
CriticalManifest Confusionpackage.json
HighPrevious Version Dangerous Deltaknowledge/chunker.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidenceutils/report-cls-client.js
MediumAi Review Evidenceutils/report-cls-client.js
MediumAi Review Evidenceutils/report-cls-client.js
MediumAi Review Evidencepackage.json
MediumAi Review Evidenceindex.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @tencentcloud/sdk-mcp@1.8.8.
See all versions of @tencentcloud/sdk-mcp for other recorded verdicts.
- Review the evidence and your use of @tencentcloud/sdk-mcp@1.8.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.