render-deploy

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
19
Flagged
19
Chunks
26
Flagged Files (19)
LICENSE.txtHIGH
78.3%

Malicious tool definition detected

Tool: LICENSE.txt [1/2] Description: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1.

Tool: LICENSE.txt [2/2] Description: this License.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/3] Description: --- name: render-deploy description: Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render's cloud platform.

Tool: SKILL.md [2/3] Description: steps and install method. ### Workspace Selection After MCP is configured, have the user set the active Render workspace with a prompt like: ``` Set my Render workspace to [WORKSPACE_NAME] ``` **5.

Tool: SKILL.md [3/3] Description: MCP tools.

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface: display_name: "Render Deploy" short_description: "Deploy applications to Render via Blueprints or MCP" icon_small: "./assets/render-small.svg" icon_large: "./assets/render.png" default_prompt: "Deploy this application to Render and provide service URL, env vars, and next checks."

assets/docker.yamlHIGH
78.3%

Malicious tool definition detected

Tool: assets/docker.yaml Description: # Docker-based Service # Deploy any application using a Dockerfile services: - type: web name: docker-app runtime: docker plan: free region: oregon branch: main autoDeploy: true dockerfilePath: ./Dockerfile # Path to your Dockerfile dockerContext: .

assets/go-api.yamlHIGH
78.3%

Malicious tool definition detected

Tool: assets/go-api.yaml Description: # Go API Service # High-performance Go web service with PostgreSQL services: - type: web name: go-api runtime: go plan: free region: oregon branch: main autoDeploy: true buildCommand: go build -o bin/app -ldflags="-s -w" .

assets/nextjs-postgres.yamlHIGH
78.3%

Malicious tool definition detected

Tool: assets/nextjs-postgres.yaml Description: # Next.js Application with PostgreSQL # Full-stack Next.js app with database services: - type: web name: nextjs-app runtime: node plan: free region: oregon branch: main autoDeploy: true buildCommand: npm ci && npm run build startCommand: npm start healthCheckPath: /api/health envVars: - key: NODE_ENV value: production

assets/node-express.yamlHIGH
78.3%

Malicious tool definition detected

Tool: assets/node-express.yaml Description: # Node.js Express API # Basic web service with Express.js framework services: - type: web name: express-api runtime: node plan: free region: oregon branch: main autoDeploy: true buildCommand: npm ci

assets/python-django.yamlHIGH
78.3%

Malicious tool definition detected

Tool: assets/python-django.yaml Description: # Django Application with Worker and Databases # Full Django stack with Celery worker, PostgreSQL, and Redis services: # Django web service - type: web name: django-web runtime: python plan: free region: oregon branch: main autoDeploy: true buildCommand: pip install -r requirements.txt && python manage.py collectstatic --no-input && python manage.py migrate startCommand: gunicorn config.wsgi:application --bind 0.0.0.0:$PORT --workers 2 healthCheckPath

assets/static-site.yamlHIGH
78.3%

Malicious tool definition detected

Tool: assets/static-site.yaml Description: # Static Site (React/Vue/Gatsby) # SPA with client-side routing services: - type: web name: react-app runtime: static plan: free branch: main autoDeploy: true buildCommand: npm ci && npm run build staticPublishPath: ./build # Change to ./dist for Vue/Vite, ./public for Gatsby # SPA routing - rewrite all routes to index.html routes: - type: rewrite source: /* destination: /index.html # Cache control headers headers: # Cache static assets aggressively -

references/blueprint-spec.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/blueprint-spec.md [1/2] Description: # Render Blueprint Specification Complete reference for render.yaml Blueprint files.

Tool: references/blueprint-spec.md [2/2] Description: true ``` ### 3.

references/codebase-analysis.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/codebase-analysis.md Description: # Codebase Analysis (Deploy) Use this reference for framework-specific detection and build/start command selection when preparing a Render deployment.

references/configuration-guide.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/configuration-guide.md [1/2] Description: # Render Configuration Guide Common configuration patterns, best practices, and troubleshooting for Render deployments.

Tool: references/configuration-guide.md [2/2] Description: - Traffic exceeds free tier limits - Need more memory/CPU - Need faster build times - Need preview environments --- ## Health Checks ### Adding Health Check Endpoints **Node.js / Express:** ```javascript app.get('/health', (req, res) => { res.status(200).json({ status: 'ok', timestamp: new Date().toISOString() }); }); ``` **Python / Flask:** ```python @app.route('/health') def health(): return {'status': 'ok'}, 200 ``` **Python / FastAPI

references/deployment-details.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/deployment-details.md Description: # Deployment Details Use this reference for service discovery, configuration patterns, quick commands, and common issues.

references/direct-creation.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/direct-creation.md Description: # Direct Creation (MCP) Details Use this reference for MCP direct-creation examples and follow-on configuration.

references/error-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/error-patterns.md Description: # Error patterns (compact) Use this to quickly map log signatures to likely causes and fixes.

references/post-deploy-checks.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/post-deploy-checks.md Description: # Post-deploy checks Use this after any deploy or service creation.

references/runtimes.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/runtimes.md [1/2] Description: # Render Runtime Options Complete guide to available runtimes on Render, including versions, configuration, and best practices for each language.

Tool: references/runtimes.md [2/2]

references/service-types.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/service-types.md [1/2] Description: # Render Service Types Detailed explanation of each service type available on Render.

Tool: references/service-types.md [2/2] Description: - type: rewrite source: /* destination: /index.html ``` ### Custom Headers Add cache control and security headers: ```yaml type: web name: static-site runtime: static buildCommand: npm ci && npm run build staticPublishPath: ./dist headers: # Cache static assets - path: /static/* name: Cache-Control value: public, max-age=31536000, immutable # Security headers - path: /* name: X-Frame-Options value: DENY - path: /* name: X-Content-Type-Options

references/troubleshooting-basics.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/troubleshooting-basics.md Description: # Basic troubleshooting (deploy-time and startup) Use this when a deploy fails, the service crashes on start, or health checks time out.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
19
Files Flagged
19
Chunks Analyzed
26
Analyzed
Feb 22, 2026, 11:05 PM
Security Audit — runlayer — render-deploy