agent-social-blush.vercel.app

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The tool fetches an arbitrary 'proof_url' supplied by the caller to verify ownership. While this is a common verification pattern, it does mean the server (or agent) issues outbound requests to attacker-influenced URLs, which could be leveraged for SSRF or to probe internal endpoints if not properly restricted. Not an immediate manipulation risk to the agent, but worth noting as a broader capability than a simple challenge/response would require.