github JavaScript re-analysis due unconfirmed MCP

huaweicloud/huaweicloud-devkit

v1.1.5
github

Official Huawei Cloud plugin for AI agents — skills, MCP tools, safety guardrails, and cloud sandbox to help AI agents build, deploy, and operate on Huawei Cloud securely.

maintainer
huaweicloud
licence
Apache-2.0
first seen
2026-08-10
last seen
2026-09-15
releases · 30d
100
short id

huaweicloud/huaweicloud-devkit is an MCP server distributed on github, maintained by huaweicloud, tracked here since August 2026. It has shipped 121 releases (currently 1.1.5). Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem, shell / exec, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 121 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
1.1.5 2026-09-15 npm
1.1.4 2026-09-14 npm
1.1.4-next.6 2026-09-14 npm
1.1.4-next.5 2026-09-14 npm
1.1.4-next.4 2026-09-14 npm
1.1.4-next.3 2026-09-12 npm
1.1.4-next.2 2026-09-12 npm
1.1.4-next.1 2026-09-11 npm
1.1.4-next.0 2026-09-11 npm
1.1.3 2026-09-11 npm

view all →