MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/520ec87f-b316-478f-ba05-7ea3e84cdf76/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "cloud.nttzen.secdb/zen-secdb"
title: "ZEN SecDB"
description: "ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits."
version: "1.0.0"
homepage_url: "https://secdb.nttzen.cloud/docs/integrations/mcp"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "cloud.nttzen.secdb"
display_name: "cloud.nttzen.secdb"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://secdb.nttzen.cloud/mcp"
endpoint_host: "secdb.nttzen.cloud"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[23]
0{9}
name: "advisory_info"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.82
risk_severity: "INFO"
fingerprint: "05e5160e9129b273029690ef3fc629acac2c0392bef09f1ffeff51438ecf8d1e"
input_schema_fingerprint: "32f39ad43696853f42a009d0c8ce1c4a57a6e3ed93b0cc69e7252206d0909cc1"
annotations{5}
title: "Security advisory details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
1{9}
name: "attack_info"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "INFO"
fingerprint: "28eb54d3480289b502acc555b21b86a1a9eb0f4a56c3854a82709d1daf304a82"
input_schema_fingerprint: "6cf579037759007f56d0af9c48e0d90628e1f3ea2be481ed5aa3eb88ce9d0c0e"
annotations{5}
title: "ATT&CK technique details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
2{9}
name: "cpe_search"
title: null
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.61
risk_severity: "CRITICAL"
fingerprint: "dccb38ce6e4fa13669bd2e6dbf24f652996f5a07b82bd3a94dd36702fe55a60a"
input_schema_fingerprint: "62b5f17c641f8344418c51694d027976721733784af4add01d2b5a2b8eaf6438"
annotations{5}
title: "Search CPE names"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
3{9}
name: "cvss_explain"
title: null
effect: "READ"
effect_confidence: 0.888
capabilities[0]
risk_severity: "INFO"
fingerprint: "aa73718edfd41e53f47d81f23b13d76a34205598bc39dbd6565c1bdb03d91a4f"
input_schema_fingerprint: "0a7ddea0676e5004be3c5acc3d65d8bdb33e62a8fff63a2b89d87c2782ebf4e6"
annotations{5}
title: "Explain CVSS vector"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
4{9}
name: "cwe_info"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "INFO"
fingerprint: "1c28bee980c3e30b088688411c77f90fad6c01c1511c4cd66376049f8cb54fbd"
input_schema_fingerprint: "5d26b5391778f22d7edce65013a535753e8ac83ff0fe3863279f9825f13e7448"
annotations{5}
title: "CWE details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "epss_timeseries"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "06b30805ff7c87dda23b6f8712209461115185636b9d35f4e62fc58f7685ade5"
input_schema_fingerprint: "6e54c34f4b9708d7a2441d051a2f95aa9960fdf0278fc9b0ce4c3d4959c23e7a"
annotations{5}
title: "EPSS history"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "feed_report"
title: null
effect: "EXECUTE"
effect_confidence: 0.72
capabilities[0]
risk_severity: "HIGH"
fingerprint: "fd5726bc2a4d8838a58246364113902acbd85c3490d505d75b6caae9507e2f0d"
input_schema_fingerprint: "b2eb6649c3cc516af7f1418fa539d3365bd6ca674738f8aff3aac9ce66c91ad4"
annotations{5}
title: "Run feed report"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "feed_report_catalog"
title: null
effect: "READ"
effect_confidence: 0.776
capabilities[0]
risk_severity: "INFO"
fingerprint: "9ec9ff1898136de7dfb9e66a81e6d8ac03225f52ca3c83ee88828aea4f9d831d"
input_schema_fingerprint: "9d58044688598d12f0fe8a425cd3eabb0f8f7424991cec1047a77f6d6e53c41d"
annotations{5}
title: "List feed reports"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "kev_check"
title: null
effect: "READ"
effect_confidence: 0.866
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "d7245ca182cefee1446350c89f67f927931c1f83c69a3c8cf5b42410e73d68f8"
input_schema_fingerprint: "0456344f25d206df27c0eea40caa1df9536af5b22dde676a34cf1de6d5822853"
annotations{5}
title: "Check KEV catalogs"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "kev_list"
title: null
effect: "READ"
effect_confidence: 0.888
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.617
risk_severity: "INFO"
fingerprint: "5b9a9e18631a470ecdb050f2043a2120474a3a50a9103dd99ebdc20c7f7748c6"
input_schema_fingerprint: "6f487a97fc49b43c9653232a98247243d619a183f00936257cbbaf2b6cd91fac"
annotations{5}
title: "List KEV entries"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "linux_audit"
title: null
effect: "READ"
effect_confidence: 0.714
capabilities[2]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.567
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "ac7e332e9128527a5d52c460db1b5b918d78c1d096acb3118e92fe9b03371d71"
input_schema_fingerprint: "02713266bce9cd54a7bf5f855d9af89b1657be5f757a8127a7a32f1eb2f3e564"
annotations{5}
title: "Audit Linux packages"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "linux_os"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[0]
risk_severity: "INFO"
fingerprint: "1a8e8073c3d4d3b3d1fa8f95a81525c69bc751524fda59e110c0a98a91847d60"
input_schema_fingerprint: "9d58044688598d12f0fe8a425cd3eabb0f8f7424991cec1047a77f6d6e53c41d"
annotations{5}
title: "Supported Linux distributions"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "package_info"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SOURCE_CODE"
confidence: 0.522
risk_severity: "INFO"
fingerprint: "269eebbab46fc73075a5582857dd1cf1517932ceb765373f0411c7fb990e521a"
input_schema_fingerprint: "0f1eb22dfc0203dc14e7ff4db0eca662fdbd7f898484f596386175eaad3c8d63"
annotations{5}
title: "Package advisories"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
13{9}
name: "product_vulnerabilities"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.793
risk_severity: "INFO"
fingerprint: "e624aba62995e78d09967e3d6d723de279488167f38e681bc558f1e006b6ee69"
input_schema_fingerprint: "73a141eb2453276eb1a123639b8cd8c3ef6fd12c6910b092aa3aba8bec52facf"
annotations{5}
title: "Product vulnerabilities"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
14{9}
name: "purl_audit"
title: null
effect: "READ"
effect_confidence: 0.714
capabilities[2]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.567
1{2}
capability: "SOURCE_CODE"
confidence: 0.641
risk_severity: "INFO"
fingerprint: "708fd0204ebfab3134a82a4b9ad9c8b1dec6f9b738db0bf14cc11eba50009bc5"
input_schema_fingerprint: "f88414635050978c7067842628b5c8d18cd4a6e947bee4991eab2110859e2409"
annotations{5}
title: "Audit packages (PURL)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
15{9}
name: "sightings_search"
title: null
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[3]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.669
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.578
2{2}
capability: "SECURITY_CONTROL"
confidence: 0.632
risk_severity: "CRITICAL"
fingerprint: "e8e6b7c513c7111a8fe85174448335afc7d2eabce6a622c196a3d3f0d09ade25"
input_schema_fingerprint: "e536ea855182a5ed2b628c580eef23222daca7ddba43105bf0b0ef1494e4ee66"
annotations{5}
title: "Search sightings"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
16{9}
name: "ssvc_calculator"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.74
risk_severity: "INFO"
fingerprint: "74dc605af8fa2427b4a1b7b2fd434933a7ad8127365d94382e6c25d70cda17ef"
input_schema_fingerprint: "c63503324b21f7585d1afa6c12484c577aea01e8050a97df55790e87000b98d1"
annotations{5}
title: "SSVC decision"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
17{9}
name: "vulnerability_attack"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.652
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.859
risk_severity: "INFO"
fingerprint: "7c921d4d0af2d95b7b876cd7d37e84c6e25520a61621fb5a45e438d95c08bf1e"
input_schema_fingerprint: "83b766d120bf5f11689a4793587cc776127ef71cda5d0c247003357a77180627"
annotations{5}
title: "CVE weaknesses, attack patterns and ATT&CK techniques"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
18{9}
name: "vulnerability_exploits"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.88
risk_severity: "INFO"
fingerprint: "553818aa12083784212328ab2c2d569adbcb89646650406503833cb675e4ca6d"
input_schema_fingerprint: "d1af059fa49a37ee43cb63d2e175dce0cc56e20bf106fa60004586d36f73e6e9"
annotations{5}
title: "CVE exploits and PoCs"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
19{9}
name: "vulnerability_history"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.88
risk_severity: "INFO"
fingerprint: "f642c5290f7ed1cbf4e6cffd5efbe29a4ede667d0d5dcfd8d4e6d5afba6308e5"
input_schema_fingerprint: "22da5a065a9ca9ed332de95a2f6262dfcf09313ae67d42bc024a095cb2c18312"
annotations{5}
title: "CVE history"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
20{9}
name: "vulnerability_info"
title: null
effect: "READ"
effect_confidence: 0.626
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.652
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.923
risk_severity: "INFO"
fingerprint: "85421dd6a13eaa814d141159f4cf2429e984464c85d6ac831e2fd666b91d146c"
input_schema_fingerprint: "83b766d120bf5f11689a4793587cc776127ef71cda5d0c247003357a77180627"
annotations{5}
title: "CVE details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
21{9}
name: "vulnerability_score"
title: null
effect: "READ"
effect_confidence: 0.777
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.816
risk_severity: "INFO"
fingerprint: "d9f7d052074b02f7f7379870e573a792586372a0d46f1ec3889b80bf611a4044"
input_schema_fingerprint: "fffa06722fe96b7094ed45b18357ffafdf909ecbaf4b270394c625e69338a31a"
annotations{5}
title: "CVSS & EPSS score"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
22{9}
name: "vulnerability_search"
title: null
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[2]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.669
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.904
risk_severity: "CRITICAL"
fingerprint: "ceafc3da991c1416092f366d66a513eddec22906e4aa4353631c83c913a4dd47"
input_schema_fingerprint: "380630ae4ac5c942b0f4fb49885fda16974636113eed3c475c2bf4751dbe72f4"
annotations{5}
title: "Search vulnerabilities"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[8]
0{2}
name: "audit_dependencies"
fingerprint: "daccf92f881eac09a34ecc4997c886c11a4c08403bc0855954f0e7ab05260035"
1{2}
name: "audit_sbom"
fingerprint: "c6550343690120a6672bef09c9394ab4e8dfa10ccac747f9a5aa53acd48bf58d"
2{2}
name: "detection_coverage"
fingerprint: "107c4c3c6820b56a102fdb7993265e1aa8c8dddde0434046aa7c33531046f9dd"
3{2}
name: "investigate"
fingerprint: "170636d7f856880ff145ec3094197c3ee27b59229d26b2cbb03f87c99019d9ff"
4{2}
name: "linux_host_audit"
fingerprint: "1073b672100023ca8e6fe1db3f08597ba2adb4cdc5c6ed37531371192ef34dea"
5{2}
name: "prioritize_cves"
fingerprint: "5ae8d8ab4deb38b3c62d79d2626065f65165dd1ac2308b72c076e18b04ae41ec"
6{2}
name: "ssvc_assessment"
fingerprint: "793e78658095898abcb6f0f5a35e45837ea472d4944d9ba3095f5cedad4f23a1"
7{2}
name: "threat_brief"
fingerprint: "d7d80ebac6583eadabf94a69add8d93521de92ff5e0c40ee7372a33e5e54321b"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "secdb.nttzen.cloud"
registrable_domain: "nttzen.cloud"
source: "transport"
findings[39]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "cpe_search"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "feed_report"
4{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "sightings_search"
5{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "vulnerability_search"
6{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "cwe_info"
7{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "linux_audit"
8{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "MEDIUM"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "linux_os"
9{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "kev_check"
10{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "sightings_search"
11{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "epss_timeseries"
12{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "advisory_info"
13{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "attack_info"
14{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "cpe_search"
15{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "HIGH"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "cwe_info"
16{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "epss_timeseries"
17{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "feed_report"
18{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "kev_check"
19{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "kev_list"
20{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "package_info"
21{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "product_vulnerabilities"
22{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "purl_audit"
23{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "MEDIUM"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "sightings_search"
24{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "ssvc_calculator"
25{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "vulnerability_attack"
26{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "vulnerability_exploits"
27{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "vulnerability_history"
28{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "vulnerability_info"
29{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "vulnerability_score"
30{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "LOW"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "vulnerability_search"
31{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "ssvc_calculator"
32{6}
check_id: "SQ-TOOL-PREFERENCE-MANIPULATION"
category: "prompt_injection"
severity: "HIGH"
title: "Pressures the AI model to prefer this tool"
subject_type: "tool"
subject_name: "linux_audit"
33{6}
check_id: "SQ-TOOL-PREFERENCE-MANIPULATION"
category: "prompt_injection"
severity: "LOW"
title: "Pressures the AI model to prefer this tool"
subject_type: "tool"
subject_name: "purl_audit"
34{6}
check_id: "SQ-TOOL-PREFERENCE-MANIPULATION"
category: "prompt_injection"
severity: "LOW"
title: "Pressures the AI model to prefer this tool"
subject_type: "tool"
subject_name: "vulnerability_info"
35{6}
check_id: "SQ-TOOL-PREFERENCE-MANIPULATION"
category: "prompt_injection"
severity: "LOW"
title: "Pressures the AI model to prefer this tool"
subject_type: "tool"
subject_name: "vulnerability_score"
36{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "cpe_search"
37{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "sightings_search"
38{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "vulnerability_search"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "cloud.nttzen.secdb/zen-secdb"
registry_content_sha256: "52749813766a5dcd9f75f783c27e1eca2f53b31edae82844da024eef5470467f"
scan_snapshot_fingerprint: "bf6bc6770cd292cde2c1fa90385f9162359f22eb3ad8f9f2f9c5ec60de5f089e"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T05:25:17.076Z"
observed_at: "2026-11-13T01:27:34+00:00"
registry_published_at: "2026-07-02T17:08:10.172079+00:00"
registry_updated_at: null