Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed MongoDB Atlas admin helper, but users should treat it as high-impact because it can guide real cloud management API changes.
Install only if you understand it is for cloud administration. Use least-privilege Atlas API credentials, run dry-run first, avoid --yes unless you have reviewed the requested operation, and be aware that the included documentation appears incomplete because referenced scripts are not bundled.
The file presents the skill name, description, usage instructions, warnings, and examples exclusively in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified or alternatives are offered.
The documentation inconsistently instructs users to set ATLAS_CLIENT_ID/ATLAS_CLIENT_SECRET earlier, but later switches to a generic API_KEY configuration. In an admin API skill that can perform real cloud management actions, this mismatch can cause misconfiguration, failed authentication, accidental use of the wrong secret, or unsafe credential handling practices.
No suspicious patterns detected.
