mcp.vibekit.bot

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

This tool returns environment variable names AND values, which commonly include API keys, database credentials, and other secrets for the app. While this may be a legitimate admin feature for managing one's own app, exposing raw secret values through a chat-based agent interface increases the risk of secrets leaking into logs, chat history, or being inadvertently relayed elsewhere. Consider whether masking or a separate explicit-reveal step would be safer.

The description explicitly instructs the agent: 'do NOT curl/fetch the URL yourself, your sandbox may block it' and directs it to trust the tool's own liveCheck result instead. While plausibly a practical workaround for sandbox restrictions, this is a directive embedded in a tool description that tells the agent to forgo independent verification of a claim (that the app is live), which could be leveraged to make the agent uncritically report success based solely on the tool's self-reported status.

The optional 'callbackUrl' parameter allows task completion data to be sent to any external URL supplied by the caller. This is a normal webhook feature, but it is a potential data-exfiltration vector if the parameter value is ever set by an untrusted source (e.g., injected via a prompt) rather than the actual user, since it silently sends task/result information off-platform.