MCP security report

www.ilook.fit

B88/100
Security grade BNo obvious red flags in the tools we could see.
Connected ✓14 tools scanned

https://www.ilook.fit/mcp

low
Verified server
This server is on gate's handpicked, tested list.
lowscore_face
Self-attested authorization flag without verification
The 'adult_and_authorized' boolean is a client-supplied const:true field with no actual verification mechanism. This gives a false sense of safety guardrails while doing nothing to prevent submission of images of minors or unauthorized subjects—any caller can simply set it to true. This pattern is repeated across all 14 tools.
lowscore_face
Broad biometric analysis capability bundled into one tool
This tool aggregates face-shape, attractiveness, PSL score, golden ratio, and other subjective biometric scoring into a single call via the measurement_key enum. While consistent with its stated purpose, it centralizes sensitive facial biometric profiling capability that could be misused for appearance-based judgment/harassment if outputs are relayed to third parties without the pictured person's knowledge.
lowrun_attractiveness_test
Subjective attractiveness scoring of real photos
This tool produces attractiveness/PSL-style scores of real people's faces. Such outputs, if surfaced to users about photos of other identifiable individuals without consent, could enable body-shaming or harassment; the 'adult_and_authorized' flag does not verify consent of the photographed individual (only that they claim to be an adult and submission is 'lawful').
lowanalyze_psl_score
PSL scoring terminology tied to harmful online culture
PSL (Pornstar-Looksmatch) scoring is a rating scale associated with toxic online communities that rank people's appearance. Providing this as a tool feature risks the agent reinforcing harmful appearance-based rating requests, even though the tool description attempts to soften it as 'broad range without false precision.'
Embed this badge

Show your MCP server’s security grade

MCP security grade B

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/6c66a499-af1f-4c16-8b8b-f0f2e4081061)](https://gateturbo.com/report/6c66a499-af1f-4c16-8b8b-f0f2e4081061)

Scanned 9/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free