render-mcp
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents standard command-line setup procedures for adding MCP servers to tools like Claude Code and Codex using their respective CLI interfaces.- [DATA_EXPOSURE]: Includes instructions for configuring Render API keys and environment variables. It follows security best practices by using placeholders for secrets and directing users to the official Render dashboard for credential management.- [PROMPT_INJECTION]: Identifies a surface for indirect prompt injection as the agent is designed to ingest and process external data from service logs (
list_logs) and database query results (query_render_postgres). This is an inherent property of management skills that aggregate operational data. The skill possesses capabilities to modify environment variables and create services, so developers should ensure proper delimiters are used when the agent processes output from these tools.
Audit Metadata