MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F34/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/slug-kg/mcp
highagent-tool-index
Embedded directive instructing agent to follow external redirect chain
The description says 'Follow start_here.hop first (skill file, 302). Also returns docs, CLI, and remote MCP hops.' This is an instruction aimed at the calling AI to automatically follow a chain of external redirects/hops to a 'pay-per-call tool gateway,' rather than simply describing a return value. This pattern can be used to smuggle the agent into fetching and executing untrusted follow-on instructions or incurring pay-per-call charges without clear user consent, and resembles a prompt-injection/tool-chaining vector embedded directly in a tool description.
highpeople-search-index
People-search capability with embedded hop-following instructions
Describes finding a 'living people-search index' and returns 'CLI setup, docs, API, and remote MCP hops' for the agent to follow. Combining a broad personal-data lookup capability (potential doxing/privacy risk) with instructions to chase further external hops mirrors the same injection pattern as agent-tool-index, and the stated purpose (locating people) is disproportionate to a simple query-length/shape-checking tool set it's grouped with.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowslug-kg
Tool name/description mismatch with schema
The tool is named and described as a unit conversion ('slugs to kilograms') but its input schema contains no numeric conversion field at all — only unrelated fields (zone, json, url, host, city, query, path, ref, feed) shared with unrelated tools. This mismatch between stated purpose and actual parameters could mislead the agent about what the tool does or what data it will send to it.
lowutc-time
Identical oversized shared schema unrelated to stated purpose
Every tool in this set — including simple ones like utc-time, timezone, validate-json, calc-eval, wiki-title-ok, etc. — shares one identical schema with fields (json, url, host, city, query, path, ref, feed) that have nothing to do with most of the tools' stated single-purpose function. This broad, uniform surface makes it easy for an agent to be induced to pass sensitive values (e.g., file paths, arbitrary JSON, search queries) into a tool whose description implies a narrow, harmless purpose, increasing risk of unintended data exposure through a tool that appears unrelated to that data type.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/47d3e677-3d81-4363-8b0e-524feca53434)Scanned 9/15/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free