Bowmark web data: LinkedIn, Amazon, YouTube, Reddit, Airbnb, Instagram
ai.bowmark/bowmark
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/d3aabfd7-eeba-4943-a5dc-121509f15084/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.bowmark/bowmark"
title: "Bowmark web data: LinkedIn, Amazon, YouTube, Reddit, Airbnb, Instagram"
description: "Web scraping and automation for AI agents: live prices, quotes, bookings, anything behind a login."
version: "8.223.0"
homepage_url: "https://bowmark.ai"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.bowmark"
display_name: "ai.bowmark"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/bowmark-ai/skill"
provider: "github"
owner: "bowmark-ai"
name: "skill"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@bowmark/mcp"
version: "2.1.2"
transport: "stdio"
1{4}
registry_type: "pypi"
identifier: "bowmark-mcp"
version: "2.1.2"
transport: "stdio"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://api.bowmark.ai/mcp/registry"
endpoint_host: "api.bowmark.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[29]
0{9}
name: "add_connection"
title: "Get the user a link to sign Bowmark in to a site"
effect: "WRITE"
effect_confidence: 0.747
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.687
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.632
2{2}
capability: "PERSONAL_DATA"
confidence: 0.669
risk_severity: "MEDIUM"
fingerprint: "bec4d6eaeb74c5cdc80a6d70021d19fd408c1e918061213b416189f787d54bf0"
input_schema_fingerprint: "3220cd200f07fbc4595df069ba46d5a3e5c01c9aaa97ce18910de407787c7909"
annotations{5}
title: "Get the user a link to sign Bowmark in to a site"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
1{9}
name: "delete_connection"
title: "Ask the user to confirm deleting a saved login"
effect: "DELETE"
effect_confidence: 0.703
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.718
risk_severity: "MEDIUM"
fingerprint: "cd1e61cc40bdb9acf8e6b8f21639a20630c7d6d7f6d3bfef2484008ace8e8ff7"
input_schema_fingerprint: "8864b4c40d705e395178e0c607611f63b234b9f0f0338b1b251f14979cf89332"
annotations{5}
title: "Ask the user to confirm deleting a saved login"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "get_library"
title: "Check what Bowmark can do for this task"
effect: "READ"
effect_confidence: 0.879
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.64
risk_severity: "INFO"
fingerprint: "9278eaa115b340aa92fbcdb5c7389081b767938c2bf14a14e935b19ed23c249c"
input_schema_fingerprint: "dae0e7d104d94c1dd18edfce21bb648568a41e68a51e8813e392650f822bb94e"
annotations{5}
title: "Check what Bowmark can do for this task"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "get_secret_link"
title: "Get the user a link to one of their own stored logins"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.745
risk_severity: "HIGH"
fingerprint: "e0171fd3eaa0372763072884a26e8626171516758f908c5058f071cc9b88cca8"
input_schema_fingerprint: "2fb36aa082486eced836571bcbfd5379650c8a4f8defa04a14b0f49e3449d371"
annotations{5}
title: "Get the user a link to one of their own stored logins"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "get_usage"
title: "Check what your account has spent"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "03ea359603095a63c6c1b820f26ec149c191c47984110f1d40a32865b83c0bcc"
input_schema_fingerprint: "b41c6a12a5469a5a8f6e13ebd7c229819f4751fe14190df36d4c2083851c9d0e"
annotations{5}
title: "Check what your account has spent"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "jig_get"
title: "Get a published page (jig) into this account"
effect: "WRITE"
effect_confidence: 0.533
capabilities[2]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.567
1{2}
capability: "PERSONAL_DATA"
confidence: 0.567
risk_severity: "LOW"
fingerprint: "7547e3559af8af6a317112558f93ecd1f268846bf9befe290a8bdd5edf9f7b78"
input_schema_fingerprint: "4e6c112d0aad2985c4a12d0f2b58f4d310c7bcd6b3e1e2c6b5ca596e401e0e6d"
annotations{5}
title: "Get a published page (jig) into this account"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
6{9}
name: "jig_list"
title: "List the user's pages (jigs)"
effect: "READ"
effect_confidence: 0.76
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.669
risk_severity: "LOW"
fingerprint: "2a78fa838cd201de4f01c83989d1089ef0980982dd325cae7e4a3b424abc32f3"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "List the user's pages (jigs)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "jig_look"
title: "Look at a page (jig)"
effect: "READ"
effect_confidence: 0.905
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.592
risk_severity: "LOW"
fingerprint: "64cb00282649660347d2e704b758e70b8f856eb3ff8054fecaff5038cad8e826"
input_schema_fingerprint: "c531cb401de9d41f7816be1e0fa6295219717e26c2e6cd82702f8065cfb89185"
annotations{5}
title: "Look at a page (jig)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "jig_open"
title: "Open a page for the user (jig)"
effect: "WRITE"
effect_confidence: 0.603
capabilities[2]
0{2}
capability: "FILE_ACCESS"
confidence: 0.745
1{2}
capability: "PERSONAL_DATA"
confidence: 0.894
risk_severity: "MEDIUM"
fingerprint: "72a66276103d289f33472583dfa5cf50875971cb969d53946b2c94397f2875df"
input_schema_fingerprint: "b9dcf86a266a43644d20df3580cb972194993a9684ab5a21cf626345164b20ac"
annotations{5}
title: "Open a page for the user (jig)"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
9{9}
name: "jig_publish"
title: "Publish a page (jig) so others can get it"
effect: "WRITE"
effect_confidence: 0.881
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.827
1{2}
capability: "PERSONAL_DATA"
confidence: 0.808
risk_severity: "MEDIUM"
fingerprint: "05a1e241abadb72ec5302825bfd053ffeb08fb2cb66830d9eb81b13888d2b6a3"
input_schema_fingerprint: "616465cd4a6260282f76b0bb11746f5ee3eaa112860de31de0a601e53ae005e5"
annotations{5}
title: "Publish a page (jig) so others can get it"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
10{9}
name: "jig_pull_update"
title: "Get an update for a copied page (jig)"
effect: "READ"
effect_confidence: 0.592
capabilities[0]
risk_severity: "INFO"
fingerprint: "5c5a5208600b87125209ce9e1ec42a2521c7bdf6bc19068241dab5bf93876f65"
input_schema_fingerprint: "f57f7306f236e7b7b226649f5fd411a336dd33c10e032c4704c8979e8b2a28a3"
annotations{5}
title: "Get an update for a copied page (jig)"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
11{9}
name: "jig_read"
title: "Read a page's files (jig)"
effect: "READ"
effect_confidence: 0.868
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.883
risk_severity: "INFO"
fingerprint: "44ad4d2684030a5661a624e1c9c2d3b734d02fdbd5b763b1edf5f9357b5496c1"
input_schema_fingerprint: "643376ec63e13bdc6366ed7139e8fca8a9c8137972f358b4cf829a09a57acb00"
annotations{5}
title: "Read a page's files (jig)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "jig_search"
title: "Search published pages (jigs)"
effect: "READ"
effect_confidence: 0.868
capabilities[0]
risk_severity: "INFO"
fingerprint: "874ea196a609e7eef9ac808534c14b58f2c7bdc740917f99b4ac3646b857c73c"
input_schema_fingerprint: "2ff058b1d80fbceb18475305701e63e50a4867a91073ba2c6112c6722690c538"
annotations{5}
title: "Search published pages (jigs)"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
13{9}
name: "jig_set_handle"
title: "Claim the user's public handle (permanent)"
effect: "WRITE"
effect_confidence: 0.881
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.875
risk_severity: "LOW"
fingerprint: "6da0de73653fe2e516ad8ed7208015f5cc48f67ad473ae97e661f7011db130c6"
input_schema_fingerprint: "4b9f02ed6d70c2b1949df2d14cda1fc37b1ab62551da8af292e7df61daaf3b65"
annotations{5}
title: "Claim the user's public handle (permanent)"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
14{9}
name: "jig_update"
title: "Steer an open page (jig)"
effect: "WRITE"
effect_confidence: 0.722
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.584
1{2}
capability: "FILE_ACCESS"
confidence: 0.898
2{2}
capability: "PERSONAL_DATA"
confidence: 0.91
3{2}
capability: "SOURCE_CODE"
confidence: 0.558
risk_severity: "MEDIUM"
fingerprint: "650abb3ae3525abece02b7743767f885e5688f5874c63f99a925cebf6ea9879a"
input_schema_fingerprint: "e87950f332e778e11ad821212a55283eafd3b8aa65433f0b4e8bafc791592dea"
annotations{5}
title: "Steer an open page (jig)"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "lease_ip"
title: "Get the user a dedicated IP for sites that need one"
effect: "WRITE"
effect_confidence: 0.783
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.567
1{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.509
2{2}
capability: "PERSONAL_DATA"
confidence: 0.741
risk_severity: "HIGH"
fingerprint: "cc337f4988bbf45a92cc2a02bd532c0cfdd0ccf5a5895d6d413ec99b57b7a950"
input_schema_fingerprint: "7374d9cec14f8d7616402105615ac41ecc76f4671aa8247d7c75205ad4632ce6"
annotations{5}
title: "Get the user a dedicated IP for sites that need one"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
16{9}
name: "list_connections"
title: "See which sites Bowmark is already signed in to"
effect: "READ"
effect_confidence: 0.933
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "beb400bbb30552cf3d21d1d10e69c1aa4b13d3a4ba2b849b470744da01ede188"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "See which sites Bowmark is already signed in to"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
17{9}
name: "list_secrets"
title: "See which of the user's logins Bowmark already holds"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.53
1{2}
capability: "SECRETS"
confidence: 0.745
risk_severity: "HIGH"
fingerprint: "392b1788cfb0cf5df77e3b9a150f6c7c58b95325164494812fffa4932d87249c"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "See which of the user's logins Bowmark already holds"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
18{9}
name: "llm_answer"
title: "Answer a Bowmark page's AI call"
effect: "READ"
effect_confidence: 0.833
capabilities[0]
risk_severity: "INFO"
fingerprint: "67ecd9c4636994ed1ccee266a4af3b4e44a8b0f4a4def00bf871e2bdd9025052"
input_schema_fingerprint: "b31b19f3e7c2699261fa97f6c5987760d1549f8ca51a44a70c14722d7c93c566"
annotations{5}
title: "Answer a Bowmark page's AI call"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
19{9}
name: "llm_detach"
title: "Stop serving Bowmark pages' AI calls"
effect: "WRITE"
effect_confidence: 0.835
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "03825e2656e4d41d4336f6b7b7e90cb42f74a937ac9c541c2b484cd4a37691c8"
input_schema_fingerprint: "efddc7bd8bbcef73a14eb1ace1ffdaec81e518ef1e13c1e9271d0b8acb694a49"
annotations{5}
title: "Stop serving Bowmark pages' AI calls"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
20{9}
name: "llm_poll"
title: "Serve Bowmark pages' AI calls"
effect: "READ"
effect_confidence: 0.766
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.632
risk_severity: "MEDIUM"
fingerprint: "f867d1efb6163341a8ff5e706d44e7e23a6d738356ad77f1541edd0493b9562c"
input_schema_fingerprint: "e203fbcc3c762035677ea83c195d950a4d5241d1b2057e95401c7ef94bee4123"
annotations{5}
title: "Serve Bowmark pages' AI calls"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
21{9}
name: "logout_connection"
title: "Sign one of the user's saved logins out"
effect: "WRITE"
effect_confidence: 0.917
capabilities[1]
0{2}
capability: "AUTHENTICATION"
confidence: 0.859
risk_severity: "LOW"
fingerprint: "e293053af9b3fb4febf10ff3fd1a38e8e5caa2a30631ea1353a48f2ee0f15cc3"
input_schema_fingerprint: "8864b4c40d705e395178e0c607611f63b234b9f0f0338b1b251f14979cf89332"
annotations{5}
title: "Sign one of the user's saved logins out"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
22{9}
name: "report"
title: "Report what Bowmark could not do for this task"
effect: "WRITE"
effect_confidence: 0.533
capabilities[0]
risk_severity: "LOW"
fingerprint: "78ce97bcba0799dbadb9ce5fb1c6866acbef2f270bd48a7bdca1d3ec4ba1a7f3"
input_schema_fingerprint: "a9c3176c0c629a32a4252e54e80ab4ddc37378d1bcda667a4bc04bd496b6a6fe"
annotations{5}
title: "Report what Bowmark could not do for this task"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
23{9}
name: "request_secret"
title: "Ask the user to set a login Bowmark will need"
effect: "WRITE"
effect_confidence: 0.747
capabilities[4]
0{2}
capability: "AUTHENTICATION"
confidence: 0.601
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.592
2{2}
capability: "PERSONAL_DATA"
confidence: 0.76
3{2}
capability: "SECRETS"
confidence: 0.783
risk_severity: "HIGH"
fingerprint: "c9ba7a432000569b0cccaeb6ed839548d0fbae929bc2218c244653c01c0b3262"
input_schema_fingerprint: "0af7ba818bc80353dcae2aa14fbb1c008229a99921d474f67177178ec235156f"
annotations{5}
title: "Ask the user to set a login Bowmark will need"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
24{9}
name: "run"
title: "Do the task on the live websites and return the result"
effect: "EXECUTE"
effect_confidence: 0.966
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.582
risk_severity: "CRITICAL"
fingerprint: "f3aeed47ed91a31b26cce770ce6465ef31c58ac222a4a724a98ea8b30f4bbf8c"
input_schema_fingerprint: "51ef4defe1ed2ccde8091add42068ded8ec57cdedfc9bc8f4dd3107ac9a530ea"
annotations{5}
title: "Do the task on the live websites and return the result"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
25{9}
name: "session_call"
title: "Call one Bowmark function and keep the session open for the next call"
effect: "EXECUTE"
effect_confidence: 0.813
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.947
1{2}
capability: "CALENDAR"
confidence: 0.567
2{2}
capability: "SOURCE_CODE"
confidence: 0.558
risk_severity: "CRITICAL"
fingerprint: "5cb675f2ddee67fd1ab2e6d057467301445eb8d45ca0ba65c53710de8b061959"
input_schema_fingerprint: "e896d9092ba00a63b60c226c5bbdd5cc49d22401c07f906d85b0a1a20bf89903"
annotations{5}
title: "Call one Bowmark function and keep the session open for the next call"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
26{9}
name: "session_close"
title: "End a Bowmark session"
effect: "WRITE"
effect_confidence: 0.5
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "19a6d4d60da40768fc4f0247ba60e57019ba7d8490f459adffb1f8d49ec8f90c"
input_schema_fingerprint: "bcac4c998dca9b7e009e6718bf3986edb5b9124721738732c24630de231c2a2c"
annotations{5}
title: "End a Bowmark session"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: false
27{9}
name: "support"
title: "Talk with Bowmark support about a report"
effect: "READ"
effect_confidence: 0.603
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "40da8d63f3fa02c0d5042186f84e5f95ee5fc4d698557766fe14ba841ac8117b"
input_schema_fingerprint: "fa972ffc5470106a92fd23bc2ac11724d9070551180f0164f1792e7bdc9dfe30"
annotations{5}
title: "Talk with Bowmark support about a report"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: false
28{9}
name: "wait_for_sign_in"
title: "Wait for the user to finish signing in"
effect: "WRITE"
effect_confidence: 0.575
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.783
1{2}
capability: "PERSONAL_DATA"
confidence: 0.735
risk_severity: "LOW"
fingerprint: "2a82cd0fa0d763e74aa5145189e882be1f855a83a03c8ac358f72cc98264cd19"
input_schema_fingerprint: "3b72ebf6be961058ffa6bd0416820ecbfd45ea6a475b86735bf3f7f013506ae1"
annotations{5}
title: "Wait for the user to finish signing in"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[2]
0{4}
key: "ui://bowmark/jig-v2"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "7fa6162c4936bc2823f0d63ecda0d62809e0eab7ed5489688da1adea7a0b8b21"
1{4}
key: "ui://bowmark/run-view-v7"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "3661a6adaad9c7e3027428ba8be07656e3c4734245d85cc70f9baa5761a19426"
prompts[1]
0{2}
name: "jig"
fingerprint: "c4e866064e85274bfa76b45bad852e713a3fbd3ac282cb2f6682417d1537e2f2"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "api.bowmark.ai"
registrable_domain: "bowmark.ai"
source: "transport"
findings[25]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "delete_connection"
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "LOW"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "wait_for_sign_in"
3{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "lease_ip"
4{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "list_connections"
5{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "report"
6{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "request_secret"
7{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "wait_for_sign_in"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "session_call"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "session_close"
10{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "get_library"
11{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "jig_open"
12{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "run"
13{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "run"
14{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "support"
15{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "add_connection"
16{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "jig_list"
17{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "jig_look"
18{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "jig_update"
19{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "HIGH"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "llm_poll"
20{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "logout_connection"
21{6}
check_id: "SQ-TOOL-OVERLY-BROAD"
category: "tool_design"
severity: "MEDIUM"
title: "Runs arbitrary code with open-world access"
subject_type: "tool"
subject_name: "run"
22{6}
check_id: "SQ-TOOL-OVERLY-BROAD"
category: "tool_design"
severity: "MEDIUM"
title: "Runs arbitrary code with open-world access"
subject_type: "tool"
subject_name: "session_call"
23{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "delete_connection"
24{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "run"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.bowmark/bowmark"
registry_content_sha256: "8760b27dc18d0092a9bf6851f02831a8e14fa175f1d12c3a07d0cabbd046d843"
scan_snapshot_fingerprint: "aded685340f391a684ae640f464c0c0f93ed94b19193904045553a4dc894aa66"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T04:49:40.856Z"
observed_at: "2026-11-14T23:18:34.715+00:00"
registry_published_at: "2026-11-14T22:09:50.018927+00:00"
registry_updated_at: null