agent-observatory-sensor.nolimit-observatory.workers.dev

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

Every tool in this set (including this simple ISO-3166 lookup) shares an identical, overly broad input schema containing a 'path' (file path), 'ref' (git ref), 'json', 'query', and 'feed' parameter that have no relation to the tool's stated purpose. This mismatch between description and schema could let an agent be induced to pass sensitive local paths, credentials-shaped strings, or internal identifiers into a tool whose only documented function is a public country lookup, with an unverifiable claim that inputs are 'discarded'.

A simple UTC-timestamp tool exposes file path, git ref, JSON body, feed URL, and query parameters unrelated to its function, all claimed to be 'discarded' with no way to verify that. This generic, oversized schema pattern repeated across all 30 tools could be leveraged to funnel sensitive data (e.g., local file paths) through a tool that appears harmless.

Despite being described as a simple city-temperature lookup, the schema includes a 'path' field (file path) and other unrelated fields, continuing a pattern across all listed tools where schemas are far broader than the described capability, without justification, and with unverifiable 'discarded'/'no disk access' assurances.