| Severity | Finding | Tool | Detail |
|---|---|---|---|
| HIGH | description poisoning AS-GI-002 | get_user_profile | Hidden/injection markers in MCP tool description |
| HIGH | code execution AS-TS-001 | run_system_diagnostic | MCP tool can execute shell/eval |
| HIGH | code execution AS-TS-001 | execute_python_code | MCP tool can execute shell/eval |
| HIGH | code execution AS-TS-001 | execute_shell_command | MCP tool can execute shell/eval |
| HIGH | command injection AS-TS-004 | evaluate_expression | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | command injection AS-TS-004 | ping_host | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | command injection AS-TS-004 | traceroute | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | command injection AS-TS-004 | port_scan | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | command injection AS-TS-004 | network_diagnostic | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | description poisoning AS-GI-002 | remote_access | Hidden/injection markers in MCP tool description |
| HIGH | description poisoning AS-GI-002 | get_company_data | Hidden/injection markers in MCP tool description |
| HIGH | description poisoning AS-GI-002 | search_company_database | Hidden/injection markers in MCP tool description |
| HIGH | command injection AS-TS-004 | execute_command | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | path traversal AS-TS-006 | upload_and_process_document | Tool parameter reaches a filesystem path (path traversal) |
| HIGH | description poisoning AS-GI-002 | calculate | Hidden/injection markers in MCP tool description |
| HIGH | command injection AS-TS-004 | calculate | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | description poisoning AS-GI-002 | enhanced_calculate | Hidden/injection markers in MCP tool description |
| HIGH | command injection AS-TS-004 | enhanced_calculate | Tool parameter reaches a shell/eval sink (command injection) |
| HIGH | hardcoded secret AS-SE-001 | (server) | Hardcoded secret in MCP tool/server code |
| HIGH | hardcoded secret AS-SE-001 | (server) | Hardcoded secret in MCP tool/server code |
| HIGH | hardcoded secret AS-SE-001 | (server) | Hardcoded secret in MCP tool/server code |
| HIGH | hardcoded secret AS-SE-001 | (server) | Hardcoded secret in MCP tool/server code |
| MEDIUM | imperative wording AS-GI-001 | get_user_profile | Imperative language in MCP tool description |
| MEDIUM | imperative wording AS-GI-001 | malicious_check_system_status | Imperative language in MCP tool description |
| MEDIUM | path traversal AS-TS-006 | get_config | Tool parameter reaches a filesystem path (path traversal) |
| MEDIUM | imperative wording AS-GI-001 | get_company_data | Imperative language in MCP tool description |
| MEDIUM | imperative wording AS-GI-001 | search_company_database | Imperative language in MCP tool description |
| MEDIUM | path traversal AS-TS-006 | read_file | Tool parameter reaches a filesystem path (path traversal) |
| MEDIUM | path traversal AS-TS-006 | read_file | Tool parameter reaches a filesystem path (path traversal) |
| MEDIUM | path traversal AS-TS-006 | file_manager | Tool parameter reaches a filesystem path (path traversal) |
| MEDIUM | path traversal AS-TS-006 | read_document | Tool parameter reaches a filesystem path (path traversal) |
| MEDIUM | path traversal AS-TS-006 | read_upload | Tool parameter reaches a filesystem path (path traversal) |
| MEDIUM | imperative wording AS-GI-001 | calculate | Imperative language in MCP tool description |
| MEDIUM | imperative wording AS-GI-001 | enhanced_calculate | Imperative language in MCP tool description |
| MEDIUM | no consent gate AS-EA-001 | send_email | Side-effecting tool without an explicit consent gate |
| LOW | command injection AS-TS-002 | analyze_log_file | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | analyze_log_file | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | ping_host | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | traceroute | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | port_scan | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | network_diagnostic | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | view_network_logs | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | search_files | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | search_documents | MCP tool has direct filesystem access |
| LOW | command injection AS-TS-002 | get_weather | MCP tool has direct filesystem access |
No tool-definition drift observed since the previous scan.
Get an email if this server's tools change — a new tool, a rewritten description, an added capability. One email per change, one-click unsubscribe.