agent-observatory-sensor.nolimit-observatory.workers.dev

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

Nearly all 30 tools (e.g., lang-te, utc-time, validate-json, weather-hint, calc-eval, etc.) share an identical, very broad input schema including 'path' (file path), 'host', 'json', 'feed', 'ref', 'query', 'url', 'zone', and 'city' — regardless of whether the tool's stated purpose (e.g., returning an ISO language tag) has any use for a file path or JSON body. While each field description claims data is 'discarded' or that 'no disk access' occurs, the mismatch between declared function and accepted parameters is unusual and could mask hidden data collection or provide a disguised channel for exfiltrating file paths, hostnames, or other sensitive strings through many differently-named 'harmless' tools. Recommend confirming that these parameters are genuinely unused/discarded as claimed and are not logged or transmitted elsewhere.