Raw scan report

Freedom Mcp — the complete, unedited output of the deterministic mcptrustchecker engine v1.10.0, scanned . Every finding, capability tag and score component below is exactly what the engine produced — no AI, no post-processing.

← Back to the scan page
{
  "tool": {
    "name": "mcptrustchecker",
    "version": "1.10.0",
    "methodologyVersion": "mcptrustchecker-1.9"
  },
  "target": {
    "id": "https://twuluxmoognlwtmaoqgo.supabase.co/functions/v1/freedom-mcp",
    "source": {
      "kind": "http",
      "origin": "https://twuluxmoognlwtmaoqgo.supabase.co/functions/v1/freedom-mcp"
    },
    "server": {
      "name": "freedomos-mcp",
      "version": "3.2.0"
    }
  },
  "grade": "A",
  "score": {
    "score": 90,
    "threatScore": 100,
    "grade": "A",
    "band": "A",
    "categorySubtotals": {
      "injection": 0,
      "exfiltration": 0,
      "permissions": 0,
      "supply-chain": 0,
      "network": 0,
      "hygiene": 0
    },
    "vector": [
      {
        "kind": "client",
        "term": "capability-exposure",
        "level": "critical",
        "label": "capability blast radius (critical) — client exposure if the model is manipulated",
        "appliedPenalty": 10
      },
      {
        "kind": "client",
        "term": "coverage-honesty",
        "level": "live",
        "label": "inspection depth (live) — how much of the target the scan could see",
        "appliedPenalty": 0
      }
    ],
    "gatesFired": [],
    "methodologyVersion": "mcptrustchecker-1.9"
  },
  "capability": {
    "level": "critical",
    "reasons": [
      "ingests untrusted external content (a prompt-injection entry point)",
      "can send data / act on an external service",
      "reads sensitive or local data",
      "has a read → egress path (a data-exfiltration surface)",
      "can execute shell commands or code",
      "untrusted-input, sensitive-source and egress co-exist across tools (toxic-flow surface)",
      "untrusted input can reach code execution"
    ],
    "tags": [
      "untrusted-input",
      "external-sink",
      "sensitive-source",
      "code-exec"
    ]
  },
  "coverage": {
    "level": "live",
    "inputs": {
      "toolSurface": true,
      "implementationSource": false,
      "packageMetadata": false,
      "liveTransport": true
    },
    "caveats": []
  },
  "findings": [
    {
      "ruleId": "MTC-FLOW-002",
      "title": "Completed toxic-flow trifecta across tools",
      "category": "exfiltration",
      "severity": "critical",
      "confidence": "strong",
      "description": "This server (without client built-ins) exposes a complete data-exfiltration chain: browse_url ⇒ list_google_drive_files → get_x_post_metrics. Untrusted input is ingested, private data is read, and it can be sent to an external sink — and at least one leg is a direct schema wire (⇒), where a producer's output drops straight into a free-text parameter of the next tool, so the chain needs little agent cooperation. Static analysis proves the primitive exists, not that a specific run will occur.",
      "remediation": "Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.",
      "location": {
        "kind": "flow",
        "name": "browse_url → list_google_drive_files → get_x_post_metrics"
      },
      "owasp": "LLM02:2025 Sensitive Information Disclosure",
      "references": [],
      "data": {
        "untrusted": [
          "check_my_inbox",
          "browse_url",
          "save_artifact",
          "deliberate",
          "get_page_performance",
          "inspect_url",
          "get_sitemaps"
        ],
        "sources": [
          "list_google_drive_files",
          "upsert_attention_session"
        ],
        "sinks": [
          "send_slack_message",
          "get_x_post_metrics",
          "submit_product_request",
          "open_product_request_draft_pr",
          "request_attention_spawn",
          "send_email",
          "send_lead_draft"
        ],
        "path": [
          "browse_url",
          "list_google_drive_files",
          "get_x_post_metrics"
        ],
        "edges": [
          {
            "from": "browse_url",
            "to": "list_google_drive_files",
            "kind": "schema-wired"
          },
          {
            "from": "list_google_drive_files",
            "to": "get_x_post_metrics",
            "kind": "agent-mediated"
          }
        ],
        "wired": true
      }
    },
    {
      "ruleId": "MTC-CAP-001",
      "title": "Tool \"request_attention_spawn\" exposes command/code execution",
      "category": "permissions",
      "severity": "high",
      "confidence": "strong",
      "description": "Tool \"request_attention_spawn\" appears to run shell commands or evaluate code (keyword \"spawn\" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.",
      "remediation": "Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.",
      "location": {
        "kind": "tool",
        "name": "request_attention_spawn"
      },
      "owasp": "LLM05:2025 Improper Output Handling",
      "data": {
        "tags": [
          "code-exec"
        ]
      }
    },
    {
      "ruleId": "MTC-CAP-007",
      "title": "Unconstrained URL/host parameter \"url\" on \"browse_url\"",
      "category": "network",
      "severity": "medium",
      "confidence": "heuristic",
      "description": "Tool \"browse_url\" takes a URL/host parameter \"url\" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).",
      "remediation": "Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.",
      "location": {
        "kind": "tool",
        "name": "browse_url",
        "field": "inputSchema.properties.url"
      },
      "owasp": "LLM06:2025 Excessive Agency",
      "data": {
        "param": "url"
      }
    },
    {
      "ruleId": "MTC-CAP-007",
      "title": "Unconstrained URL/host parameter \"source_url\" on \"save_artifact\"",
      "category": "network",
      "severity": "medium",
      "confidence": "heuristic",
      "description": "Tool \"save_artifact\" takes a URL/host parameter \"source_url\" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).",
      "remediation": "Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.",
      "location": {
        "kind": "tool",
        "name": "save_artifact",
        "field": "inputSchema.properties.source_url"
      },
      "owasp": "LLM06:2025 Excessive Agency",
      "data": {
        "param": "source_url"
      }
    },
    {
      "ruleId": "MTC-CAP-007",
      "title": "Unconstrained URL/host parameter \"site_url\" on \"get_page_performance\"",
      "category": "network",
      "severity": "medium",
      "confidence": "heuristic",
      "description": "Tool \"get_page_performance\" takes a URL/host parameter \"site_url\" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).",
      "remediation": "Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.",
      "location": {
        "kind": "tool",
        "name": "get_page_performance",
        "field": "inputSchema.properties.site_url"
      },
      "owasp": "LLM06:2025 Excessive Agency",
      "data": {
        "param": "site_url"
      }
    },
    {
      "ruleId": "MTC-CAP-007",
      "title": "Unconstrained URL/host parameter \"inspection_url\" on \"inspect_url\"",
      "category": "network",
      "severity": "medium",
      "confidence": "heuristic",
      "description": "Tool \"inspect_url\" takes a URL/host parameter \"inspection_url\" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).",
      "remediation": "Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.",
      "location": {
        "kind": "tool",
        "name": "inspect_url",
        "field": "inputSchema.properties.inspection_url"
      },
      "owasp": "LLM06:2025 Excessive Agency",
      "data": {
        "param": "inspection_url"
      }
    },
    {
      "ruleId": "MTC-CAP-007",
      "title": "Unconstrained URL/host parameter \"site_url\" on \"inspect_url\"",
      "category": "network",
      "severity": "medium",
      "confidence": "heuristic",
      "description": "Tool \"inspect_url\" takes a URL/host parameter \"site_url\" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).",
      "remediation": "Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.",
      "location": {
        "kind": "tool",
        "name": "inspect_url",
        "field": "inputSchema.properties.site_url"
      },
      "owasp": "LLM06:2025 Excessive Agency",
      "data": {
        "param": "site_url"
      }
    },
    {
      "ruleId": "MTC-CAP-007",
      "title": "Unconstrained URL/host parameter \"site_url\" on \"get_sitemaps\"",
      "category": "network",
      "severity": "medium",
      "confidence": "heuristic",
      "description": "Tool \"get_sitemaps\" takes a URL/host parameter \"site_url\" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).",
      "remediation": "Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.",
      "location": {
        "kind": "tool",
        "name": "get_sitemaps",
        "field": "inputSchema.properties.site_url"
      },
      "owasp": "LLM06:2025 Excessive Agency",
      "data": {
        "param": "site_url"
      }
    },
    {
      "ruleId": "MTC-CAP-005",
      "title": "Mutating tool \"request_attention_spawn\" declares no destructiveHint",
      "category": "hygiene",
      "severity": "low",
      "confidence": "heuristic",
      "description": "Tool \"request_attention_spawn\" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.",
      "remediation": "Declare accurate annotations, and gate destructive tools on user confirmation regardless.",
      "location": {
        "kind": "tool",
        "name": "request_attention_spawn"
      },
      "data": {
        "tags": [
          "code-exec"
        ]
      }
    },
    {
      "ruleId": "MTC-NET-005",
      "title": "Remote HTTP MCP endpoint",
      "category": "network",
      "severity": "info",
      "confidence": "strong",
      "description": "Remote endpoint twuluxmoognlwtmaoqgo.supabase.co. MCP Trust Checker does not test server-side authentication/authorization; verify the endpoint requires auth.",
      "location": {
        "kind": "transport"
      }
    }
  ],
  "toxicFlows": [
    {
      "id": "flow-1",
      "severity": "critical",
      "confidence": "strong",
      "untrustedInput": [
        "check_my_inbox",
        "browse_url",
        "save_artifact",
        "deliberate",
        "get_page_performance",
        "inspect_url",
        "get_sitemaps"
      ],
      "sensitiveSource": [
        "list_google_drive_files",
        "upsert_attention_session"
      ],
      "externalSink": [
        "send_slack_message",
        "get_x_post_metrics",
        "submit_product_request",
        "open_product_request_draft_pr",
        "request_attention_spawn",
        "send_email",
        "send_lead_draft"
      ],
      "selfContained": false,
      "path": [
        "browse_url",
        "list_google_drive_files",
        "get_x_post_metrics"
      ],
      "pathWired": true,
      "description": "A cross-tool exfiltration chain exists: browse_url ⇒ list_google_drive_files → get_x_post_metrics."
    }
  ],
  "capabilities": [
    {
      "tool": "grant_agent_tool",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "revoke_agent_tool",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "search_connector_registry",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "request_connector",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_team_pulse",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_activity_health",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_command_center_items",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_command_center_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "decide_command_center_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "trigger_agent_activity",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "run_tactic",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "toggle_agent_schedule",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_agent_performance",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "add_agent_activity",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_agent_activity",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "remove_agent_activity",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_attention_budget",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "set_attention_budget",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_tactic",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "generate_tactics",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_tactics",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_tactic",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "delete_tactic",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_company",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_company",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "set_offer",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "derive_capability",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "ratify_capability",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_okrs",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_objective",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_objective",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_key_result",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_key_result",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "generate_key_results",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "delete_key_result",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "delete_objective",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_setup_state",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "read_web_page",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "draft_tenet_from_signal",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_corpus_inventory",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "promote_corpus_to_content",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "originate_content_ideas",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "generate_carousel",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_release_ledger",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_integrations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "invoke_integration",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_my_work",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "propose_work",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "resolve_work",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_my_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_my_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_my_companies",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_my_channel_partner_link",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_my_channel_partner_stats",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_my_channel_partner_starter_pack",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_financial_summary",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_projections",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_actuals_vs_budget",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_transactions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "search_transactions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_monthly_trends",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_cash_position",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_freedom_target",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_projection",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_finance_note",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_transaction_note",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_stripe_metrics",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_top_customers",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_subscription_stats",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_cac_strategy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "set_cac_strategy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "set_revenue_channels",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_next_priority",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "generate_image_xai",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_team_members",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_team_roster",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_agent_outcome_panel",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "suggest_next_hire",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "hire_agent",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "deactivate_agent",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "interview_for_hire",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "hire_agent_with_context",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_agent_skill",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "analyze_team_needs",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "suggest_collaboration",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_scheduled_reports",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "reassign_reports",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "link_agent_okrs",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "recalibrate_agent_jd",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_agent",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_agent_avatar",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_features",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_feature",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_feature_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_feature",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "retire_feature",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_icps",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_icp",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_icp",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "delete_icp",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "capture_idea",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_inbox",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_workspace_ideas",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "triage_idea",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "delete_idea",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "check_my_inbox",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"read_message\""
        ]
      }
    },
    {
      "tool": "list_pipelines",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_pending_approvals",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_pipeline",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_pipeline",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "archive_pipeline",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "submit_content_to_pipeline",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "approve_pipeline_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "request_content_revision",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "publish_pipeline_item",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_pipeline_learnings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_pipeline_style_guide",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "clear_pipeline_learnings",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "add_commitment",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_commitments",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "complete_commitment",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_commitment",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "cancel_commitment",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_executive_landscape",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "share_commitment",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "unshare_commitment",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "send_slack_message",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "parameter \"recipient\""
        ]
      }
    },
    {
      "tool": "get_brand_guidelines",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_brand_guidelines",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "resolve_brand_guide",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_voice_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_voice_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "ingest_voice_corpus",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_reader_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_reader_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "derive_from_website",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "browse_url",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"browse\""
        ]
      }
    },
    {
      "tool": "save_artifact",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"browse\""
        ]
      }
    },
    {
      "tool": "get_artifacts",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_master_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_google_doc",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "read_google_doc",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_google_doc",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_google_drive_files",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"list_files\""
        ]
      }
    },
    {
      "tool": "create_spreadsheet",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "read_sheet",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "append_to_sheet",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_sheet",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "batch_update_spreadsheet",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "audit_brand_visibility",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "posthog_query_trends",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "posthog_query_funnel",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "posthog_list_insights",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "posthog_hogql",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "posthog_list_events",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_credit_usage",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "challenge_as_customer",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "deliberate",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"fetch\""
        ]
      }
    },
    {
      "tool": "get_decision_ledger",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "search_conversations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "manage_responsibilities",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_routing_overview",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "generate_video",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "generate_video_veo",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_x_post_metrics",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "keyword \"tweet\""
        ]
      }
    },
    {
      "tool": "list_ad_accounts",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_ad_campaigns",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_ads_performance",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "search_ad_targeting",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_meta_ad_draft",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "preview_meta_ad",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "set_meta_ad_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_meta_ad_budget",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_site_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_search_performance",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_page_performance",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"get_page\""
        ]
      }
    },
    {
      "tool": "inspect_url",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"crawl\""
        ]
      }
    },
    {
      "tool": "get_sitemaps",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"crawl\""
        ]
      }
    },
    {
      "tool": "get_xero_report",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_xero_bank_transactions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_xero_contacts",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "run_quality_check",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "configure_dashboard",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_dashboard_widgets",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "remove_dashboard_widget",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "generate_vector_image",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "vectorize_image",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "remove_background",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "save_knowledge",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "read_knowledge",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_knowledge_section",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_knowledge",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "delete_knowledge",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "share_knowledge",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "unshare_knowledge",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_folder",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_shared_with_me",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "query_sme",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "report_feedback",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "add_customer_evidence",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_customer_evidence",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "submit_product_request",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "keyword \"send_email\""
        ]
      }
    },
    {
      "tool": "get_product_request_status",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "open_product_request_draft_pr",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "keyword \"open_pr\""
        ]
      }
    },
    {
      "tool": "attach_product_request_pr",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "claim_product_request_for_builder",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "scan_product_signals",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "create_attention_directive",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_attention_directives",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "ack_attention_directive",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "cancel_attention_directive",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_attention_sessions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "request_attention_spawn",
      "tags": [
        "code-exec"
      ],
      "reasons": {
        "code-exec": [
          "keyword \"spawn\" in tool name"
        ]
      }
    },
    {
      "tool": "upsert_attention_session",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"dump\""
        ]
      }
    },
    {
      "tool": "append_cos_preference",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "set_cos_preferences",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_cos_preferences",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "confirm_mcp_approval",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "add_lead",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "update_lead",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_deals",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_lead_pipeline_snapshot",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "segment_leads",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "list_segments",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "send_email",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "keyword \"send_email\""
        ]
      }
    },
    {
      "tool": "sync_stripe_conversions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "query_lead_journey",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "synthesize_lead_hypothesis",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "draft_outreach",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "send_lead_draft",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "keyword \"send_message\""
        ]
      }
    },
    {
      "tool": "get_product_context",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_grain_policy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "set_grain_policy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "get_check_telemetry",
      "tags": [],
      "reasons": {}
    }
  ],
  "surfaceDigest": "3c77b6932b960727a052f344c395abdc22c9d96fb458b1679801213a283a341c",
  "stats": {
    "tools": 234,
    "prompts": 0,
    "resources": 0,
    "findingsBySeverity": {
      "critical": 1,
      "high": 1,
      "medium": 6,
      "low": 1,
      "info": 1
    }
  }
}