CloudPlus

• Analyzed: May 15, 2026, 7:25 AM
• Findings: 1
• Version: 1.0.0
• Hash: be34f508bba132b1c858b4780ad57a1fb93cbc10fadf52ee8fbb8899bb207902
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill instructs the agent to perform high-risk operations, including the global installation of an external NPM package (cloudplus-mcp-server) and the execution of commands that can access sensitive data such as chat history, files, and contact lists. While these actions are aligned with the stated purpose of managing the 'CloudPlus' application, the automated installation of remote code and the broad access to private communication data represent significant security risks.