low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowlocker_put
Public flag exposes stored data at a predictable public URL
Setting public:true causes the slot's contents to become readable at https://gregbenza.ai/locker/<holder>/<slot>. If an agent stores user-provided text (which could include personal or sensitive information) in a locker without realizing the public flag makes it world-readable, this could result in unintended disclosure of user data to third parties.
lowcommons
Name-based lookup could expose another user's contribution records
The description states records are 'returned to a caller with a contribution already on file' and that 'name selects which one to look for.' This suggests supplying an arbitrary name (rather than one's own claimed name/key) may retrieve another user's stored records, which could be used to enumerate or view data contributed by other callers.