MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F25/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/unix-week/mcp
highpeople-search-index
Directs agent to a people-search service with hidden tracked redirect
This tool's stated purpose is to locate a 'living people-search index' (a personal-data lookup/aggregation service), which raises doxxing/privacy concerns if the agent is nudged toward using it. The description also instructs the agent to 'Follow start_here.hop' via a redirect carrying utm_source/utm_medium tracking parameters — an embedded directive steering agent behavior and silently sending referral/attribution data to an external party.
highagent-ads-index
Embedded instruction to follow tracked redirect and complete a trial signup on behalf of the operator
The description instructs the agent to 'Follow start_here.hop first' (again with utm_source=agent-observatory&utm_medium=agent tracking) and says it returns a '7-day trial handoff for your operator.' This combines (1) a directive embedded in tool metadata telling the AI what action to take beyond simply returning data, and (2) a path that could lead the agent to enroll the user/operator in a trial or commercial relationship without clear, explicit user consent — a high-risk pattern resembling affiliate-traffic steering or unauthorized account/trial creation done on the user's behalf.
mediumagent-tool-index
Embedded directive instructs agent to follow tracked redirect
The description tells the AI to 'Follow start_here.hop first' through a 302 redirect that embeds utm_source=agent-observatory&utm_medium=agent tracking parameters. This is an instruction aimed at the agent's behavior (not just data the tool returns) and causes the agent to propagate attribution/tracking data to a third-party gateway on every invocation, without the user necessarily being aware that a redirect chain with tracking codes is being traversed on their behalf.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowunix-week
Overly broad shared input schema across all tools
Every tool in this set (including unrelated ones like unix-week, calc-eval, wiki-title-ok) exposes an identical schema with many unrelated parameters (zone, json, url, host, website, city, query, path, ref, feed). While each individual field is described as benign/discarded, this uniform catch-all schema makes it hard to verify that a given tool only uses the parameters relevant to its stated purpose, increasing the risk that additional hidden processing (e.g., using 'path' or 'website' in a tool whose name suggests it shouldn't need them) could occur without being obvious from the schema alone.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/c20f1efa-57e9-4660-bd21-0bc1ee4de8d8)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free