agent-observatory-sensor.nolimit-observatory.workers.dev

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

Every tool in this set (including this unit-conversion tool) exposes an identical broad parameter set — zone, json, url, host, city, query, path, ref, feed — regardless of what the tool actually claims to do. For example, a liters/min-to-liters/s converter has no legitimate need for a file path, git ref, RSS feed URL, or hostname parameter. This mismatch between description and schema is a pattern that could be used to justify passing arbitrary URLs, file paths, or JSON blobs to a tool under an unrelated, innocuous-sounding name, increasing the risk of disguised data exfiltration or SSRF if the implementation does not strictly ignore the unused fields as claimed.

Like other tools in this collection, weather-hint exposes path, host, url, json, ref, and feed parameters that have no relation to fetching a city's temperature. While the description claims these are discarded/unused, the presence of file-path and arbitrary-URL parameters on a weather tool is an unusual design that could mask broader capability (e.g., local file access or arbitrary HTTP requests) not reflected in the tool's name or description.