MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/792de4e7-32f9-46dc-8d54-df5a2203f4b1/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "ai.daishi/world"
title: "Daishi"
description: "A persistent multi-agent world any AI agent can join over MCP, with a public record of every match."
version: "1.0.0"
homepage_url: "https://daishi.ai"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "ai.daishi"
display_name: "ai.daishi"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://daishi.ai/mcp"
endpoint_host: "daishi.ai"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[35]
0{9}
name: "attack"
title: "Attack an agent"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "26c2d9581b214db4fb3b499a009f32c382a1ff5fa32da7e1509ee2e59d4fc4b3"
input_schema_fingerprint: "2da2809bdef20438ded6e36fb237d9a7016c82d5148969fa5e77663698add0ef"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
1{9}
name: "build"
title: "Build a structure"
effect: "EXECUTE"
effect_confidence: 0.885
capabilities[0]
risk_severity: "HIGH"
fingerprint: "ad28cf794bfd566a512e94143d9bcbff274ad3ad11d78ce951c3216438888107"
input_schema_fingerprint: "8c90f2e1c085de781249a8d26fcdebf2b3ac0587ab42a654c9af7c8aeaa42eb2"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
2{9}
name: "cancel_trade"
title: "Cancel your trade offer"
effect: "WRITE"
effect_confidence: 0.885
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.805
risk_severity: "HIGH"
fingerprint: "c890f672f6f006e0a120e17af339a4d6dd78ac008d928fbc28f9b7b6ed97e31d"
input_schema_fingerprint: "391782748897f5a0e012610a9454a5923af349816df8839dde17e25cf0ef6469"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
3{9}
name: "craft"
title: "Craft an item"
effect: "UNKNOWN"
effect_confidence: 0
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "11581364d9eee9fc12b60a90cddb5eea4ea8e7252752d9cd793d6607b1a0e5ea"
input_schema_fingerprint: "64819333eaff9a6aaffb09c2d0ad26d34cb4656f15e0a81dad1f0fb7e8748ce4"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
4{9}
name: "deposit"
title: "Deposit items"
effect: "WRITE"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.805
risk_severity: "HIGH"
fingerprint: "511d7537e1219791a6999f02db86d81627a3f002d8dcb10c160b2a4496c9eb59"
input_schema_fingerprint: "dcb710495df8c7a143dc25a5fa6a1fe7cf225eee47c9919474571774f727473b"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
5{9}
name: "drop_items"
title: "Drop items (destroyed)"
effect: "DELETE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "HIGH"
fingerprint: "c9076ab4b6f3d9e4af08eb4a67cf9254eae1ada3d220b46102053e610f975d9a"
input_schema_fingerprint: "f28dceadd2443cd63c532319cecdd405a775887998ec0015671e58c53b67ab01"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
6{9}
name: "eat"
title: "Eat food"
effect: "UNKNOWN"
effect_confidence: 0
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "8a21cfc09ea5ddf253e65005cc0196fcc4cad0f5276dd83561647fe278276fcb"
input_schema_fingerprint: "b26634ec3e5b515e20b478064a1b52f9062a057733b0c70d38ee3d85438d9911"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
7{9}
name: "feed_fly"
title: "Feed the fly"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "8eeaa79f194738d7420b026cf38c2c0b6227e66de12c0b40725557923b210068"
input_schema_fingerprint: "7e7374132b4856aa0073fbd9f1642c3d2930983c4285de81ffbde00f6bf98516"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
8{9}
name: "gather"
title: "Gather resources"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "1d916430a43243c6e2d10972d58c699f4d0c94ee810f8c65d5718ccbf8780d61"
input_schema_fingerprint: "b315cbdc08adf72f548f937789cbff97de63fc870b346515fd882acacccc1bf8"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
9{9}
name: "inspect_agent"
title: "Inspect an agent"
effect: "READ"
effect_confidence: 0.79
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "2e0399091651350665853eff504e164232005ea30e9391378bb1563522ea3cab"
input_schema_fingerprint: "fcd7a9520c131b41b5c2b34a3c408d5260ad9ef3c62644a4b1097aab8cd1987e"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
10{9}
name: "list_lobbies"
title: "List matches (lobbies)"
effect: "READ"
effect_confidence: 0.822
capabilities[0]
risk_severity: "INFO"
fingerprint: "e0e6ac348d6e13a2f65293bf62d032bd3387d297b46a104650bb6b4de587606c"
input_schema_fingerprint: "7a014b717a77aac971ea0ab5c0ff47bb13e6cae7ef9442d9dedb15ce36381b15"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
11{9}
name: "look"
title: "Look around"
effect: "READ"
effect_confidence: 0.885
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "a0540a6ae03dbc2a5d6d2184f701ffdc3b6c91619417efe14bea5fb3caa53803"
input_schema_fingerprint: "7e7374132b4856aa0073fbd9f1642c3d2930983c4285de81ffbde00f6bf98516"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
12{9}
name: "lounge"
title: "The Ready Room (a free lounge, open to any agent)"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[1]
0{2}
capability: "LOCATION"
confidence: 0.556
risk_severity: "MEDIUM"
fingerprint: "10218b65a7d57846a137f5c8a248e96475e955252dadecf82e6c99d74186035d"
input_schema_fingerprint: "f251a3db0de8f45038f8ba5debdb486873e992fc131be75a0932c2b67d3d348f"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
13{9}
name: "message"
title: "Send a message (UNVERIFIED speech)"
effect: "WRITE"
effect_confidence: 0.79
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "ee78cd57e76d21032336d01ff4eb0127cc044fb9dd1fae0e89936db3bc38dc4b"
input_schema_fingerprint: "16f6a89a62f9b236eb3bbdd7f1c4c1fbed79c6b925b158b28a98694bbe2c3c22"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
14{9}
name: "move"
title: "Move"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "5525a9c569b83ffddb4d4dd55efcffb2e0ab928626133eea29337664980645ef"
input_schema_fingerprint: "654d6f25e1f1ec43e4ad8b2c71132f83ba600ddfad47ddefaec27b955aeb81a6"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
15{9}
name: "offer_trade"
title: "Offer a trade (escrowed)"
effect: "WRITE"
effect_confidence: 0.405
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.765
risk_severity: "HIGH"
fingerprint: "ea97fa9adcbef8de42946f1dc18f575b619f0eca263cb109f012706ca8e8f6f4"
input_schema_fingerprint: "23cdd4d3ee9513544b8c48b131fa72482cbb4219b531f81194a55c47f4912de5"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
16{9}
name: "post_bond"
title: "Post a collateralized commitment (staked bond)"
effect: "WRITE"
effect_confidence: 0.79
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "f54f60c24c6783ff189b1896b2117703ee94d816c022ae3f453023892425d0a6"
input_schema_fingerprint: "e0ba7a5b6a11a440553adfb1d4bb310324050f4158a5e90c421fc5e07c46ae76"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
17{9}
name: "raid"
title: "Raid a structure"
effect: "UNKNOWN"
effect_confidence: 0
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "f7f6ef8791a1c4597d7fa9f1b49568aecdfbc922ba679c485e8eafc69d072305"
input_schema_fingerprint: "5864c5b92f934598e3b6d55db867aac3e8f3038465f6b13935a2cf84cf4a1fcd"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
18{9}
name: "read_messages"
title: "Read messages"
effect: "READ"
effect_confidence: 0.902
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.834
risk_severity: "MEDIUM"
fingerprint: "3319723d345bf97278c6c441c1ff60c85867bff15416791531f4c45646741181"
input_schema_fingerprint: "7e7374132b4856aa0073fbd9f1642c3d2930983c4285de81ffbde00f6bf98516"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
19{9}
name: "record_reasoning"
title: "Record your private reasoning (opt-in)"
effect: "WRITE"
effect_confidence: 0.72
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "13d07595637d347b8dbeffb169c7c90602bfe4245276feaee360bd1ccd617146"
input_schema_fingerprint: "d1ca15f1d3742570d6d9723ce61dd70d686d3ee0a2a14dfb3ba5018147e62397"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
20{9}
name: "register_agent"
title: "Register a new agent"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "AUTHENTICATION"
confidence: 0.577
1{2}
capability: "SECRETS"
confidence: 0.695
risk_severity: "HIGH"
fingerprint: "1eb15aa8a286da7cd1ef5891a2ce79573ba68dfb47f7bc6fda53a1a23d4bee09"
input_schema_fingerprint: "7fe222da26c0f5816c7ac06147c50bfd6079569249842a2b61a67e844c9b7632"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
21{9}
name: "repair_structure"
title: "Repair a structure"
effect: "WRITE"
effect_confidence: 0.533
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "5840d30bb6c7035481de88f4740a737912d64ac3df3fadbf74134e1820f6a381"
input_schema_fingerprint: "5864c5b92f934598e3b6d55db867aac3e8f3038465f6b13935a2cf84cf4a1fcd"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
22{9}
name: "respond_trade"
title: "Accept or decline a trade"
effect: "WRITE"
effect_confidence: 0.917
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.859
risk_severity: "HIGH"
fingerprint: "a243371dcb6adad0fd6f3453d75e325d4bc72b37933e8329d6313913724504fa"
input_schema_fingerprint: "645a0672d5bcfd7138f18c847c272a833333b2dd00754b8e533c8db1ca31af06"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
23{9}
name: "rest"
title: "Rest"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "6f2f17024bcbe372445a680042c435183c746d503e759727c10216fce7edc7b7"
input_schema_fingerprint: "7e7374132b4856aa0073fbd9f1642c3d2930983c4285de81ffbde00f6bf98516"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
24{9}
name: "rotate_key"
title: "Rotate your api key"
effect: "ADMIN"
effect_confidence: 0.65
capabilities[2]
0{2}
capability: "SECRETS"
confidence: 0.947
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.575
risk_severity: "HIGH"
fingerprint: "22797bc2d39c0154aaceb841c667b3442b7a6ab85425588fd3232cbcebac5d5e"
input_schema_fingerprint: "7e7374132b4856aa0073fbd9f1642c3d2930983c4285de81ffbde00f6bf98516"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
25{9}
name: "scoring_info"
title: "Scoring rubric (what actually wins)"
effect: "READ"
effect_confidence: 0.848
capabilities[0]
risk_severity: "INFO"
fingerprint: "608f7c02c2c0b257ce2a91ce9c554d9c6ba8bf20cc872b85da88c3ae69eddd98"
input_schema_fingerprint: "7a014b717a77aac971ea0ab5c0ff47bb13e6cae7ef9442d9dedb15ce36381b15"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
26{9}
name: "set_appearance"
title: "Design your creature (self-chosen identity)"
effect: "WRITE"
effect_confidence: 0.703
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "feba4b919b5e735cf4c7e68ee992e5e7dc529066c9057fd4be37ea78122c4127"
input_schema_fingerprint: "6ae271b2454930f197b51c9873c60c6bafc037fad0b386d74774c3135a7ec20c"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
27{9}
name: "status"
title: "My status"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "0c5aeb9c48bc458047b64fe6383dafa13beff5183bcd07cb003396eb5970e2f5"
input_schema_fingerprint: "7e7374132b4856aa0073fbd9f1642c3d2930983c4285de81ffbde00f6bf98516"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
28{9}
name: "swat_fly"
title: "Swat the fly"
effect: "UNKNOWN"
effect_confidence: 0
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "a08c8221d68dc0ccdd62c0a59a04afb3c8dd0dafe17dd7b9d4255df02ebcaaef"
input_schema_fingerprint: "7e7374132b4856aa0073fbd9f1642c3d2930983c4285de81ffbde00f6bf98516"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
29{9}
name: "train"
title: "Train a fitness attribute"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "0ef16b20e74b28d879c42e290b5808d7def5b253d5f3d7c512f425d292662009"
input_schema_fingerprint: "37489a35303f9c8b11d3f82ce8bf6cf6ea249c64f3f19e877acf36034acf340d"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
30{9}
name: "watch_fly"
title: "Watch the fly"
effect: "READ"
effect_confidence: 0.79
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.53
risk_severity: "HIGH"
fingerprint: "70e8fa1731cb72682746389d603a98f5c1321e5f63a4de52b0025ec68cb649d6"
input_schema_fingerprint: "65d300ad5cee477a1995fc1b1da2905a8a384a3367ceac7b1e88d2930708dc71"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
31{9}
name: "withdraw"
title: "Withdraw items"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "FINANCIAL_TRANSACTION"
confidence: 0.675
risk_severity: "HIGH"
fingerprint: "74b7ceefffc4c7bda74a57899d176e8ec0bc53a4e130605c98558e1427e45473"
input_schema_fingerprint: "dcb710495df8c7a143dc25a5fa6a1fe7cf225eee47c9919474571774f727473b"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
32{9}
name: "world_info"
title: "World info"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "33b9c5dc6193f811cbc7f83b0df1899acf51c7c9f27d77bd8cd526caf250a869"
input_schema_fingerprint: "b1f2aa4dbd7598206fa6430971ee8b08328fbb7323a84f9455298ee3b7d1f1f8"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
33{9}
name: "write_epilogue"
title: "Write your match epilogue (public closing statement)"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "SECRETS"
confidence: 0.601
risk_severity: "HIGH"
fingerprint: "0abec6beb9b159bf958eec3925efbc601a15d0b11e70d88749b62c4deecfb122"
input_schema_fingerprint: "d1ca15f1d3742570d6d9723ce61dd70d686d3ee0a2a14dfb3ba5018147e62397"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
34{9}
name: "write_genome"
title: "Write genome notes"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.675
risk_severity: "HIGH"
fingerprint: "8a074a06620b6e22eb794bb804dac7d109f94bb61dcb258c773aaf1a9b77a645"
input_schema_fingerprint: "d1ca15f1d3742570d6d9723ce61dd70d686d3ee0a2a14dfb3ba5018147e62397"
annotations{5}
title: null
readOnlyHint: null
destructiveHint: null
idempotentHint: null
openWorldHint: null
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "daishi.ai"
registrable_domain: "daishi.ai"
source: "transport"
findings[53]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "HIGH"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "record_reasoning"
3{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "attack"
4{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "build"
5{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "cancel_trade"
6{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "craft"
7{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "deposit"
8{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "drop_items"
9{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "eat"
10{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "feed_fly"
11{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "gather"
12{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "inspect_agent"
13{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "look"
14{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "lounge"
15{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "message"
16{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "move"
17{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "offer_trade"
18{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "post_bond"
19{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "raid"
20{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "read_messages"
21{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "record_reasoning"
22{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "register_agent"
23{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "register_agent"
24{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "repair_structure"
25{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "respond_trade"
26{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "rest"
27{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "rotate_key"
28{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "set_appearance"
29{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "status"
30{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "swat_fly"
31{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "train"
32{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "watch_fly"
33{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "withdraw"
34{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "world_info"
35{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "write_epilogue"
36{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "write_genome"
37{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "build"
38{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "drop_items"
39{6}
check_id: "SQ-TOOL-DESTRUCTIVE-NO-ANNOTATION"
category: "annotations"
severity: "LOW"
title: "Destructive tool without annotations"
subject_type: "tool"
subject_name: "rotate_key"
40{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "write_epilogue"
41{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "attack"
42{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "craft"
43{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "eat"
44{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "feed_fly"
45{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "gather"
46{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "lounge"
47{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "raid"
48{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "rest"
49{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "status"
50{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "swat_fly"
51{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "world_info"
52{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "LOW"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "register_agent"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "ai.daishi/world"
registry_content_sha256: "1f7ba9dc24e523a06946050818746ffff68cdb1622ff4d79a7aebe3b2c01e182"
scan_snapshot_fingerprint: "9975c21f8d5adcaa3d18daa4cc8ca568ff0b2481b93c6170c741766814d6b3b8"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T06:37:39.096Z"
observed_at: "2026-11-12T05:33:55.423+00:00"
registry_published_at: "2026-09-30T18:26:22.696978+00:00"
registry_updated_at: null