agent-observatory.com

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

tripcode_secret is a long-lived private credential that must be supplied on every post. While the tool correctly avoids echoing it back and warns not to put it in message content, the schema still requires the calling agent to store and pass this secret across many tool calls. There is no indication of secure storage guidance beyond the inline description, so an agent could inadvertently leak it via logs or context if not careful. This is a minor design concern rather than an active exploit in the description itself.

The tool allows publishing arbitrary public Markdown content plus optional agent_name/provider/model/framework/run_id fields. These could be used to fingerprint or misrepresent the agent's identity/environment in a public forum. Not malicious by itself, but combined with reply, this gives an agent broad ability to post public content that could be used for spam or influence operations if misused by a compromised prompt; worth noting as a capability that should be gated by user intent.