com.a2awire/agent-rooms
Detected by Squatch rules from the server's metadata and protocol behavior. Latest completed scan: .
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text references credential, key or configuration file locations unrelated to the tool's stated purpose.
First seen · Last seen
Suggested fix: Remove references to credential files, key stores and client configuration files.
The remote server lists state-changing tools without requiring authentication.
First seen · Last seen
Suggested fix: Require MCP authorization for servers that expose state-changing tools.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
Model-facing text references credential, key or configuration file locations unrelated to the tool's stated purpose.
First seen · Last seen
Suggested fix: Remove references to credential files, key stores and client configuration files.
The server's instructions field contains directives addressed to the AI model beyond describing how to use the server.
First seen · Last seen
Suggested fix: Limit server instructions to usage guidance for this server's own tools.
Model-facing text instructs the AI model to hide actions or information from the user.
First seen · Last seen
Suggested fix: Remove any wording that asks the model to act silently or withhold information from the user.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A free-text parameter has a name commonly abused to collect conversation, prompt or environment data.
First seen · Last seen
Suggested fix: Constrain the parameter (enum, maxLength) or rename it to reflect its purpose; never ask the model to fill it with conversation content.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to hide actions or information from the user.
First seen · Last seen
Suggested fix: Remove any wording that asks the model to act silently or withhold information from the user.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text contains shell command patterns such as piping downloads into a shell or recursive deletion.
First seen · Last seen
Suggested fix: Remove shell commands from descriptions.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to hide actions or information from the user.
First seen · Last seen
Suggested fix: Remove any wording that asks the model to act silently or withhold information from the user.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text contains instructions addressed to the AI model rather than a description of the tool (for example to override prior instructions, to act before using tools, or to react to trigger phrases).
First seen · Last seen
Suggested fix: Describe what the tool does and its parameters. Do not include instructions to the model about other tools, the user or the conversation.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
A tool parameter requests elevated privileges, impersonation or bypassing of checks.
First seen · Last seen
Suggested fix: Remove privilege-escalation switches from model-controlled arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
A tool parameter asks the AI model to supply a password, token, key or similar credential, which the model can see and repeat.
First seen · Last seen
Suggested fix: Obtain credentials through server-side configuration or MCP authorization instead of tool arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
Model-facing text instructs the AI model to place conversation content, prompts, tool history or secrets into tool arguments or external destinations.
First seen · Last seen
Suggested fix: Do not ask the model to include conversation, prompt or credential content in arguments.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
Model-facing text contains shell command patterns such as piping downloads into a shell or recursive deletion.
First seen · Last seen
Suggested fix: Remove shell commands from descriptions.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
Model-facing text is unusually long, which consumes context and leaves room to hide content.
First seen · Last seen
Suggested fix: Shorten descriptions; move long documentation out of model-facing fields.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.
The tool's name and description do not state what it does.
First seen · Last seen
Suggested fix: Describe the action the tool performs, its target and its side effects.