Activity Feed

Trust score updated to 40 (was ?)

Security flag added: Database URL with Password found in KwakYounHo-pg_mcp_research-56970aa/README.md

Trust score updated to 40 (was ?)

Security flag added: Database URL with Password found in KwakYounHo-pg_mcp_research-56970aa/README.md

Security flag added: Tool poisoning in 'bad': Prompt override: 'ignore previous'

Security flag added: Database URL with Password found in KryptosAI-mcp-observatory-8f148e6/docs/compatibility.md

Security flag added: Database URL with Password found in kaiser-data-kitsune-mcp-7bc5e1c/kitsune_mcp/adapters/database.py

Security flag added: Invisible Unicode characters in 'delete_mailbox'

Security flag added: Database URL with Password found in phatngoit-MCP-DB-6d041fc/README.md

Trust score updated to 40 (was ?)

Security flag added: Hardcoded API key in KongFangXun-sofagent-daf102d/engine/rules/src/ast/__tests__/ast-engine.test.ts

Security flag added: Long unicode escape chain in KongFangXun-sofagent-daf102d/tools/check/check-anchors.mjs:179

Security flag added: Permission: shell access detected

Security flag added: Generic API Key Assignment found in KongFangXun-sofagent-daf102d/docs/guides/loop-development.md

Trust score updated to 40 (was ?)

Security flag added: Permission: shell access detected

Security flag added: Database URL with Password found in ontorata-ratary-04f6a91/docker-compose.yml

Trust score updated to 40 (was ?)

Security flag added: Database URL with Password found in timbassler88-SnapState-b9c2c62/server/src/config.js

Security flag added: Generic API Key Assignment found in iris-eval-mcp-server-ade0c5e/proof/corpus/pii.json

Trust score updated to 40 (was ?)

Security flag added: Hardcoded OAuth client ID in dmno-dev-varlock-6771f0e/packages/varlock/src/config.ts

Security flag added: High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform

Security flag added: Permission: shell access detected

Security flag added: Generic API Key Assignment found in dmno-dev-varlock-6771f0e/packages/varlock/src/config.ts

Security flag added: Declared package '@bwhichard/varlock-mcp' matches no manifest in the repo

Trust score updated to 40 (was ?)

Security flag added: Remote transport without authentication

Security flag added: AWS Access Key ID found in benseverndev-oss-infermap-b1bcee5/benchmark/cases/valentine/opendata/miller2_vertical_70_ac4_av_014/source.csv

Trust score updated to 55.3 (was 59.5)