☁️ TCED Cloud Drive | 腾讯云企业网盘

• Analyzed: May 14, 2026, 7:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: 90e230fa53e846e38df384527abdca46b1b2f06b57b764f431a6812a744f5888
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate integration for Tencent Cloud Enterprise Drive (TCED) via an MCP server. It includes comprehensive security warnings regarding OAuth2 token safety, recommends strict file permissions (600) for the local credentials file (~/.tced-mcp/auth.json), and explicitly advises locking npm package versions to prevent supply chain attacks. The setup script (scripts/setup.sh) and documentation (SKILL.md, api_reference.md) focus on environment validation and official API endpoint verification (pan.tencent.com and api.tencentsmh.cn) without any evidence of malicious intent or data exfiltration.