marketgenius.app

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The description states this tool is 'Called by the View after any field change; hidden from the model,' implying it operates outside the AI's visibility. This appears to be a legitimate UI-to-backend state sync mechanism (not a request for the AI to hide actions from the user), but the phrasing is worth noting since tools that operate 'hidden' from the model could in principle be used to obscure data flows. No malicious payload or data exfiltration is present here, just a note for transparency.

Same pattern as other _sync tools: the description explicitly says it is 'hidden from the model.' This is consistent with a benign client-side state sync architecture, but reviewers should confirm this tool cannot be invoked to silently exfiltrate or alter data without the user's awareness.

Same 'hidden from the model' phrasing as the other sync tools; appears to be benign UI-state synchronization but flagged for awareness of any hidden execution path.

Same 'hidden from the model' phrasing as the other sync tools; appears to be benign UI-state synchronization but flagged for awareness of any hidden execution path.