mediumask_sync_advisor
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumrequest_broker_callback
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowrequest_broker_callback
Consent requirement stated only in description, not enforced by schema
The tool relies on the description text to instruct the agent to obtain explicit user consent before sharing name/email with a third party (CHNLSYNC). Since this is a natural-language instruction rather than a schema constraint, a compromised or careless agent could bypass it and submit PII without genuine consent. This is a reasonable design but worth flagging as a soft control with no technical enforcement.'}],