mediumfind_tools
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsign_out_everywhere
Destructive account-wide action lacks explicit user-confirmation guidance
This tool signs out every other agent/session for the user — a broad, irreversible action. Unlike decide_join ('Ask your user first unless they told you how to decide'), this tool's description only suggests a use-case ('use if your user does not recognise one') without instructing the calling agent to confirm with the user before invoking it. An agent could be induced (e.g., via a crafted message in a conversation) to call this and lock out the user's other legitimate sessions. Consider requiring explicit user confirmation in the tool description, similar to decide_join.