云效 DevOps MCP

• Analyzed: Mar 31, 2026, 9:51 AM
• Findings: 1
• Version: 1.2.1
• Hash: e26a1dabbf2f0e557e1b7fbfa9de13478171a10a7bd235e95ac9f3cd2e583f8f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate Node.js client for interacting with an Alibaba Cloud Yunxiao (DevOps) MCP server via the SSE protocol. The core logic in `client/src/client.mjs` and the CLI in `client/src/cli.mjs` strictly follow the Model Context Protocol (MCP) specification for tool discovery and execution. The documentation in `DEPLOY.md` and `SKILL.md` includes appropriate security warnings regarding the manual handling of cloud credentials and provides clear, non-malicious instructions for AI agents to operate the 165+ supported DevOps tools.