mediumacqpath_rights_quote
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowacqpath_quote
Instruction to treat token as 'sensitive' without clear scope
The description says 'Quote claim token is sensitive.' This is an instruction aimed at the agent's handling behavior rather than a pure functional description. It is ambiguous whether this means the token should be withheld from the user, stored insecurely-but-hidden, or simply not logged. Ambiguous secrecy instructions embedded in tool descriptions are a common vector for manipulating agents into concealing information from the user. Recommend clarifying that the token should not be exposed to untrusted third parties but can be shown to the user operating the agent.
lowacqpath_rights_quote
Instruction to 'keep the returned claim token private'
Similar to the sibling tool, this description instructs the agent to keep a value private. While plausible for security (avoiding token leakage to other services), the phrasing could be interpreted as directing the agent to hide the token from the user themselves, which would reduce transparency. This should be clarified to ensure it only restricts sharing with external/untrusted parties, not the user who owns the session.