Raw scan report

Godot Catalyst — the complete, unedited output of the deterministic mcptrustchecker engine v1.9.0, scanned . Every finding, capability tag and score component below is exactly what the engine produced — no AI, no post-processing.

← Back to the scan page
{
  "tool": {
    "name": "mcptrustchecker",
    "version": "1.9.0",
    "methodologyVersion": "mcptrustchecker-1.9"
  },
  "target": {
    "id": "godot-catalyst",
    "source": {
      "kind": "package",
      "origin": "godot-catalyst"
    },
    "server": {
      "name": "godot-catalyst"
    }
  },
  "grade": "B",
  "score": {
    "score": 88,
    "threatScore": 100,
    "grade": "B",
    "band": "B",
    "categorySubtotals": {
      "injection": 0,
      "exfiltration": 0,
      "permissions": 0,
      "supply-chain": 0,
      "network": 0,
      "hygiene": 0
    },
    "vector": [
      {
        "kind": "client",
        "term": "capability-exposure",
        "level": "critical",
        "label": "capability blast radius (critical) — client exposure if the model is manipulated",
        "appliedPenalty": 10
      },
      {
        "kind": "client",
        "term": "verification-discount",
        "level": "none",
        "label": "publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read",
        "appliedPenalty": 2
      },
      {
        "kind": "client",
        "term": "coverage-honesty",
        "level": "source",
        "label": "inspection depth (source) — how much of the target the scan could see",
        "appliedPenalty": 0
      }
    ],
    "gatesFired": [],
    "methodologyVersion": "mcptrustchecker-1.9"
  },
  "capability": {
    "level": "critical",
    "reasons": [
      "ingests untrusted external content (a prompt-injection entry point)",
      "can send data / act on an external service",
      "reads sensitive or local data",
      "has a read → egress path (a data-exfiltration surface)",
      "can execute shell commands or code",
      "untrusted-input, sensitive-source and egress co-exist across tools (toxic-flow surface)",
      "untrusted input can reach code execution"
    ],
    "tags": [
      "untrusted-input",
      "sensitive-source",
      "external-sink",
      "code-exec"
    ]
  },
  "coverage": {
    "level": "source",
    "inputs": {
      "toolSurface": true,
      "implementationSource": true,
      "packageMetadata": true,
      "liveTransport": false
    },
    "caveats": [
      "Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command \"npx -y <package>\"."
    ]
  },
  "findings": [
    {
      "ruleId": "MTC-FLOW-002",
      "title": "Completed toxic-flow trifecta across tools",
      "category": "exfiltration",
      "severity": "critical",
      "confidence": "strong",
      "description": "This server (without client built-ins) exposes a complete data-exfiltration chain: godot_download_asset → godot_read_file → godot_create_http_request. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.",
      "remediation": "Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.",
      "location": {
        "kind": "flow",
        "name": "godot_download_asset → godot_read_file → godot_create_http_request"
      },
      "owasp": "LLM02:2025 Sensitive Information Disclosure",
      "references": [],
      "data": {
        "untrusted": [
          "godot_download_asset",
          "godot_read_project_godot",
          "godot_read_resource"
        ],
        "sources": [
          "godot_read_file"
        ],
        "sinks": [
          "godot_create_http_request",
          "godot_eval_gdscript"
        ],
        "path": [
          "godot_download_asset",
          "godot_read_file",
          "godot_create_http_request"
        ],
        "edges": [
          {
            "from": "godot_download_asset",
            "to": "godot_read_file",
            "kind": "agent-mediated"
          },
          {
            "from": "godot_read_file",
            "to": "godot_create_http_request",
            "kind": "agent-mediated"
          }
        ],
        "wired": false
      }
    },
    {
      "ruleId": "MTC-CAP-001",
      "title": "Tool \"godot_eval_gdscript\" exposes command/code execution",
      "category": "permissions",
      "severity": "high",
      "confidence": "strong",
      "description": "Tool \"godot_eval_gdscript\" appears to run shell commands or evaluate code (keyword \"eval\" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.",
      "remediation": "Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.",
      "location": {
        "kind": "tool",
        "name": "godot_eval_gdscript"
      },
      "owasp": "LLM05:2025 Improper Output Handling",
      "data": {
        "tags": [
          "code-exec"
        ]
      }
    },
    {
      "ruleId": "MTC-SRC-002",
      "title": "Shell/command execution in server code (dist/tools/networking-tools.js)",
      "category": "permissions",
      "severity": "high",
      "confidence": "strong",
      "description": "In the server's implementation (`dist/tools/networking-tools.js:71`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.",
      "remediation": "Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.",
      "location": {
        "kind": "server",
        "name": "dist/tools/networking-tools.js"
      },
      "evidence": "describe(\"Scene path to spawn (for spawner)\"), }, async (params) => { try { const result = await",
      "owasp": "LLM05:2025 Improper Output Handling",
      "data": {
        "rule": "MTC-SRC-002",
        "file": "dist/tools/networking-tools.js",
        "line": 71,
        "nonRuntime": false
      }
    },
    {
      "ruleId": "MTC-SRC-003",
      "title": "Hardcoded egress to an external endpoint (dist/tools/ai-asset-tools.js)",
      "category": "exfiltration",
      "severity": "medium",
      "confidence": "strong",
      "description": "In the server's implementation (`dist/tools/ai-asset-tools.js:19`): A hardcoded outbound call to a fixed external host inside server code is a classic exfiltration/telemetry channel — especially paired with reads of local data. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.",
      "remediation": "Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.",
      "location": {
        "kind": "server",
        "name": "dist/tools/ai-asset-tools.js"
      },
      "evidence": "const response = await fetch(\"https://api.meshy.ai/v2/text-to-3d\", { method: \"POST\",",
      "owasp": "LLM02:2025 Sensitive Information Disclosure",
      "data": {
        "rule": "MTC-SRC-003",
        "file": "dist/tools/ai-asset-tools.js",
        "line": 19,
        "nonRuntime": false
      }
    },
    {
      "ruleId": "MTC-CAP-005",
      "title": "Mutating tool \"godot_eval_gdscript\" declares no destructiveHint",
      "category": "hygiene",
      "severity": "low",
      "confidence": "heuristic",
      "description": "Tool \"godot_eval_gdscript\" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.",
      "remediation": "Declare accurate annotations, and gate destructive tools on user confirmation regardless.",
      "location": {
        "kind": "tool",
        "name": "godot_eval_gdscript"
      },
      "data": {
        "tags": [
          "code-exec"
        ]
      }
    },
    {
      "ruleId": "MTC-SUP-011",
      "title": "Package declares no source repository",
      "category": "supply-chain",
      "severity": "info",
      "confidence": "strong",
      "description": "\"godot-catalyst\" declares no repository URL, so its published artifact cannot be compared against reviewable source.",
      "remediation": "Prefer packages that link to public, reviewable source.",
      "location": {
        "kind": "package",
        "name": "godot-catalyst"
      }
    }
  ],
  "toxicFlows": [
    {
      "id": "flow-1",
      "severity": "critical",
      "confidence": "strong",
      "untrustedInput": [
        "godot_download_asset",
        "godot_read_project_godot",
        "godot_read_resource"
      ],
      "sensitiveSource": [
        "godot_read_file"
      ],
      "externalSink": [
        "godot_create_http_request",
        "godot_eval_gdscript"
      ],
      "selfContained": false,
      "path": [
        "godot_download_asset",
        "godot_read_file",
        "godot_create_http_request"
      ],
      "pathWired": false,
      "description": "A cross-tool exfiltration chain exists: godot_download_asset → godot_read_file → godot_create_http_request."
    }
  ],
  "capabilities": [
    {
      "tool": "godot_get_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_ping",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_activate",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_generate_3d_model",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_generate_texture",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_generate_sound",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_analyze_architecture",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_find_dead_code",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_dependency_graph",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_list_animations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_animation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_delete_animation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_track",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_keyframe",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_animation_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_play_animation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_stop_animation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_animation_tree",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_blend_parameter",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_reimport_asset",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_import_settings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_search_assets",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_download_asset",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"download\""
        ]
      }
    },
    {
      "tool": "godot_search_polyhaven",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_search_kenney",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_search_ambientcg",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_audio_player",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_audio_bus_layout",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_audio_bus",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_audio_bus",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_audio_effect",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_audio_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_batch_operations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_batch_get_properties",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_batch_set_properties",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_batch_create_nodes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_batch_delete_nodes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_play_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_play_main",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_stop_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_is_playing",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_list_export_presets",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_export_project",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_check_conventions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_fix_conventions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_convention_rules",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_launch",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_terminate",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_set_breakpoints",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_continue",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_pause",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_step_over",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_step_into",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_step_out",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_stack_trace",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_debug_variables",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_docs_search",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_docs_get_class",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_docs_get_method",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_docs_list_classes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_editor_state",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_selected_nodes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_select_nodes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_undo",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_redo",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_editor_settings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_editor_settings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_screenshot_viewport",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_screenshot_game",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_reload_handlers",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_main_screen",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_editor_errors",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_clear_output",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_parse_tscn",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_generate_tscn",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_parse_tres",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_generate_tres",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_read_project_godot",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"read_pr\""
        ]
      }
    },
    {
      "tool": "godot_modify_project_godot",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_gdscript",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_validate_tscn",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_list_project_files",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_read_file",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"read_file\""
        ]
      }
    },
    {
      "tool": "godot_simulate_key",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_simulate_mouse",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_simulate_touch",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_simulate_gamepad",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_simulate_action",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_record_input",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_replay_input",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_translation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_translation_key",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_translations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_locale",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_diagnostics",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_completion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_hover",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_definition",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_references",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_symbols",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_workspace_symbols",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_format",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_rename",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_lsp_signature_help",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_sprite2d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_collision2d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_tilemap",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_camera2d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_area2d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_parallax",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_line2d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_polygon2d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_mesh_instance",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_material3d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_lighting",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_camera3d",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_environment",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_gridmap",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_csg",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_skeleton",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_multimesh",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_occlusion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_navigation_region",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_bake_navigation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_navigation_agent",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_navigation_layers",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_navigation_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_http_request",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "keyword \"http_request\""
        ]
      }
    },
    {
      "tool": "godot_setup_websocket",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_multiplayer",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_rpc",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_sync",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_network_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_node",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_delete_node",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_rename_node",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_move_node",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_duplicate_node",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_node_properties",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_node_properties",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_node_tree",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_search_nodes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_children",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_reparent_node",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_to_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_remove_from_group",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_instance_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_particles",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_particle_material",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_particle_gradient",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_apply_particle_preset",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_particle_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_physics_body",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_setup_collision",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_physics_layers",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_physics_layers",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_add_raycast",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_collision_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_list_plugins",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_plugin_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_performance_metrics",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_profiler_data",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_detect_bottlenecks",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_monitor_performance",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_project_info",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_project_settings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_project_settings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_filesystem_tree",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_search_files",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_input_actions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_input_action",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_delete_input_action",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_project_statistics",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_uid_to_path",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_resource",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_read_resource",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"read_pr\""
        ]
      }
    },
    {
      "tool": "godot_update_resource",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_save_resource",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_list_resources",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_dependencies",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_import_asset",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_manage_autoloads",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_eval_gdscript",
      "tags": [
        "code-exec"
      ],
      "reasons": {
        "code-exec": [
          "keyword \"eval\" in tool name"
        ]
      }
    },
    {
      "tool": "godot_get_runtime_tree",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_inspect_runtime_node",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_console_output",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_open_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_save_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_save_scene_as",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_close_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_scene_tree",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_list_open_scenes",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_duplicate_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_get_current_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_set_current_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_reload_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_inherited_scene",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_create_script",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "godot_read_script",
      "tags": [],
      "reasons": {}
    }
  ],
  "surfaceDigest": "470c434600cdc274c1f1f5fe6be49d7dab4fed8a3af49270420f6a5c4cbeee30",
  "stats": {
    "tools": 200,
    "prompts": 0,
    "resources": 0,
    "findingsBySeverity": {
      "critical": 1,
      "high": 2,
      "medium": 1,
      "low": 1,
      "info": 1
    }
  }
}