Security audit
Security checks across malware telemetry and agentic risk
This package is a mixed bundle of unrelated app, skill, cloud-cluster, Terraform, and release-feed content rather than a clean single-purpose skill.
Review this package carefully before installing. The MCP app guidance itself looks ordinary, but the artifact includes unrelated cloud and infrastructure instructions; do not let an agent follow the OpenShift or Terraform operational steps unless you intentionally want those changes and understand their impact.
git clone https://github.com/Velclaw/Velclaw.git cd Velclaw npm install cp .env.example .env # điền API key của bạn npm run dev ```
git clone https://github.com/Velclaw/Velclaw.git cd Velclaw npm install cp .env.example .env # điền API key của bạn npm run dev ```
</div>
</header>
<!-- ============ HERO (merged from trang chủ developer.hashicorp.com) ============ -->
<section class="hero" id="hero">
<div>
<div class="hero-eyebrow"><span class="dot"></span> Terraform CLI · Tutorial trực tiếp</div>]; const TECH_BADGES = [ "Node.js", "Anthropic API", "GitHub", "VS Code", "JetBrains Mono", ".env", "REST", "Claude", "Express", ];
]; const TECH_BADGES = [ "Node.js", "Anthropic API", "GitHub", "VS Code", "JetBrains Mono", ".env", "REST", "Claude", "Express", ];
]; const TECH_BADGES = [ "Node.js", "Anthropic API", "GitHub", "VS Code", "JetBrains Mono", ".env", "REST", "Claude", "Express", ];
```js
app.post('/api/chat', async (req, res) => {
const r = await fetch('https://api.example-provider.com/v1/messages', {
method: 'POST',
headers: { 'Authorization': `Bearer ${process.env.THIRD_PARTY_API_KEY}` },
body: JSON.stringify(req.body)```js
app.post('/api/chat', async (req, res) => {
const r = await fetch('https://api.example-provider.com/v1/messages', {
method: 'POST',
headers: { 'Authorization': `Bearer ${process.env.THIRD_PARTY_API_KEY}` },
body: JSON.stringify(req.body)```js
app.post('/api/chat', async (req, res) => {
const r = await fetch('https://api.example-provider.com/v1/messages', {
method: 'POST',
headers: { 'Authorization': `Bearer ${process.env.THIRD_PARTY_API_KEY}` },
body: JSON.stringify(req.body)```js
app.post('/api/chat', async (req, res) => {
const r = await fetch('https://api.example-provider.com/v1/messages', {
method: 'POST',
headers: { 'Authorization': `Bearer ${process.env.THIRD_PARTY_API_KEY}` },
body: JSON.stringify(req.body)```js
app.post('/api/chat', async (req, res) => {
const r = await fetch('https://api.example-provider.com/v1/messages', {
method: 'POST',
headers: { 'Authorization': `Bearer ${process.env.THIRD_PARTY_API_KEY}` },
body: JSON.stringify(req.body)```js
app.post('/api/chat', async (req, res) => {
const r = await fetch('https://api.example-provider.com/v1/messages', {
method: 'POST',
headers: { 'Authorization': `Bearer ${process.env.THIRD_PARTY_API_KEY}` },
body: JSON.stringify(req.body)```bash npm install -D tsx npm pkg set scripts.dev="cross-env NODE_ENV=development concurrently 'cross-env INPUT=mcp-app.html vite build --watch' 'tsx --watch main.ts'" ``` > [!NOTE]
You can choose to also install additional operators that are recommended for the use of certain OpenShift AI features. If they are not already installed on your cluster, you can choose to include them in the add-on installation. Or, you can install them at anytime by using OperatorHub or by following the operator-specific installation steps. To use these operators, you must [disable outbound traffic protection](https://cloud.ibm.com/docs/openshift?topic=openshift-sbd-allow-outbound&format=markdown) for your cluster.
You are responsible for managing these operators, including but not limited to updating, monitoring, recovery, and re-installation.
{: important}
The following operators are recommended.You can choose to also install additional operators that are recommended for the use of certain OpenShift AI features. If they are not already installed on your cluster, you can choose to include them in the add-on installation. Or, you can install them at anytime by using OperatorHub or by following the operator-specific installation steps. To use these operators, you must [disable outbound traffic protection](https://cloud.ibm.com/docs/openshift?topic=openshift-sbd-allow-outbound&format=markdown) for your cluster.
You are responsible for managing these operators, including but not limited to updating, monitoring, recovery, and re-installation.
{: important}
The following operators are recommended.You can choose to also install additional operators that are recommended for the use of certain OpenShift AI features. If they are not already installed on your cluster, you can choose to include them in the add-on installation. Or, you can install them at anytime by using OperatorHub or by following the operator-specific installation steps. To use these operators, you must [disable outbound traffic protection](https://cloud.ibm.com/docs/openshift?topic=openshift-sbd-allow-outbound&format=markdown) for your cluster.
You are responsible for managing these operators, including but not limited to updating, monitoring, recovery, and re-installation.
{: important}
The following operators are recommended.You can choose to also install additional operators that are recommended for the use of certain OpenShift AI features. If they are not already installed on your cluster, you can choose to include them in the add-on installation. Or, you can install them at anytime by using OperatorHub or by following the operator-specific installation steps. To use these operators, you must [disable outbound traffic protection](https://cloud.ibm.com/docs/openshift?topic=openshift-sbd-allow-outbound&format=markdown) for your cluster.
You are responsible for managing these operators, including but not limited to updating, monitoring, recovery, and re-installation.
{: important}
The following operators are recommended.VirusTotal findings are pending for this skill version.
Detected: suspicious.env_credential_access