Skip to content
Squatch MCP

MCP Bill of Materials

A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/c67346b8-f088-495c-ac27-65a818b2566b/mcbom.

MCP Bill of Materials

root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "com.reminderit/reminderit"
title: "ReminderIt"
description: "Schedule real phone-call reminders with WhatsApp follow-up — medication, wake-ups, family check-ins."
version: "0.3.0"
homepage_url: "https://reminderit.com"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "com.reminderit"
display_name: "com.reminderit"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.reminderit.com/mcp"
endpoint_host: "mcp.reminderit.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[25]
0{9}
name: "add_recipient"
title: "Add a person to remind"
effect: "WRITE"
effect_confidence: 0.902
capabilities[2]
0{2}
capability: "MESSAGING"
confidence: 0.558
1{2}
capability: "PERSONAL_DATA"
confidence: 0.922
risk_severity: "MEDIUM"
fingerprint: "1cce6c55481a687479f3eb6fcc062551d263be769c6f9bd1265d03687840cdd9"
input_schema_fingerprint: "f1fdd720548691cc22da39f48a59be4ac8d5db9ffc4df5abfe9da13dad7eedf3"
annotations{5}
title: "Add a person to remind"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
1{9}
name: "clear_reminder_voice"
title: "Reset a reminder's voice"
effect: "DELETE"
effect_confidence: 0.913
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.669
risk_severity: "MEDIUM"
fingerprint: "b3f188771ce77353db6082623a477e37d0eb97c400bfddc20bff06f638d909c3"
input_schema_fingerprint: "7ad8a6c7c675779d3f46be7250bc1fbad3d3789d4af4887fd37a42ce788c52ad"
annotations{5}
title: "Reset a reminder's voice"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
2{9}
name: "create_reminder"
title: "Create reminder call"
effect: "WRITE"
effect_confidence: 0.917
capabilities[2]
0{2}
capability: "MESSAGING"
confidence: 0.856
1{2}
capability: "PERSONAL_DATA"
confidence: 0.509
risk_severity: "MEDIUM"
fingerprint: "b74e98af959eed5c9c71cdc8935d210b9d8ead28f556c977750924b37ec577e6"
input_schema_fingerprint: "8bd3f1cd1813eb6acfc18d8ecafda67fb87b814bea6b287a097cf73aaffef89e"
annotations{5}
title: "Create reminder call"
readOnlyHint: false
destructiveHint: false
idempotentHint: false
openWorldHint: true
3{9}
name: "delete_reminder"
title: "Delete reminder"
effect: "DELETE"
effect_confidence: 0.913
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "5f7ad1b10296d825f8a52120ad6d3e4ee4efe4e17f9c7ea5c00db5c95a4d7612"
input_schema_fingerprint: "481a3faacea5bdc158c37fd1bb6e46c245cb00b75c0166b5ff7645272788f431"
annotations{5}
title: "Delete reminder"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
4{9}
name: "get_recent_calls"
title: "Get call history"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.61
risk_severity: "MEDIUM"
fingerprint: "394849cfa6d9a771909dfbf82db7bd2d70b4b0a6b30c63ee355cf1cfda519fe3"
input_schema_fingerprint: "9034ea7bacc48fe118a5b11d3e6ebe7a6a78c36503a10e8e494e265ba3f6fdb7"
annotations{5}
title: "Get call history"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "get_reminder"
title: "Get reminder details"
effect: "READ"
effect_confidence: 0.921
capabilities[0]
risk_severity: "INFO"
fingerprint: "df5ba39544f531d3e08beb1c96d038fb941304e0947afc05d4df19ccae33b4f9"
input_schema_fingerprint: "7b24171abe2ffe88ca400973e22f3f2ab2395e9508d9de98d70e04ff85fee9e9"
annotations{5}
title: "Get reminder details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
6{9}
name: "get_usage"
title: "Check call balance"
effect: "READ"
effect_confidence: 0.921
capabilities[2]
0{2}
capability: "MESSAGING"
confidence: 0.558
1{2}
capability: "PAYMENT"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "bd67112f69a59a65576cdf2dc04beebf98eaedb5cfc4a710c0d0249e9a4c2eb2"
input_schema_fingerprint: "486a323e9d6225874b26f1ddac8eaaf924e0a0e753d1fa8a6c0d86032df10428"
annotations{5}
title: "Check call balance"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
7{9}
name: "get_voice_settings"
title: "Get default voice"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.669
risk_severity: "MEDIUM"
fingerprint: "32467874c719165a532154c77afc7cf513a92fba1428bf56babb423c955e49c9"
input_schema_fingerprint: "a3b87253828b0292f7ab82d2ce911b78b944c8bee166c06cf67944ae44d95647"
annotations{5}
title: "Get default voice"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "list_recipients"
title: "List people you remind"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.928
risk_severity: "LOW"
fingerprint: "eb79e9c50c5cd9ff6b4c11eaf58e32a0c546e04bb66d7adc21f1751a70eb6fbc"
input_schema_fingerprint: "f9fbceb3e12fd9a26cee074bf53da24f16f6756bdbbac95041fd2369e262233c"
annotations{5}
title: "List people you remind"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
9{9}
name: "list_reminders"
title: "List reminders"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.558
risk_severity: "MEDIUM"
fingerprint: "ee7dafb392e0f057469c2366986d880ee4421183200d535da585e6d20315292e"
input_schema_fingerprint: "8a6152cb3ba5772ed258b1caa89a41a0c9493850888ee0fd6dc9a9aa97ddf171"
annotations{5}
title: "List reminders"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
10{9}
name: "list_upcoming"
title: "List upcoming calls"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.558
risk_severity: "MEDIUM"
fingerprint: "f720ca7196bb571cdd4d77101c576e61a43777aea0d270e2450d9a67141ea39d"
input_schema_fingerprint: "cfe451df4e312dfd8b2a330993a367ab9e17061f80b3c235340705d0523c48d1"
annotations{5}
title: "List upcoming calls"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "list_voices"
title: "List voices"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.669
risk_severity: "MEDIUM"
fingerprint: "d2f28ea2357038b281f13a80177981ba9c1d18b2341ee4cf0b408e63d62e9341"
input_schema_fingerprint: "2333ce76751416ddc945d6672ab1b9b922c0923bef8fae8ed09d0d4c4231e3cf"
annotations{5}
title: "List voices"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "pause_reminder"
title: "Pause reminder"
effect: "WRITE"
effect_confidence: 0.917
capabilities[0]
risk_severity: "LOW"
fingerprint: "4a3b75a15707d53f191dcfab3ada281ee4fc1b74d7d367edd74ef53e833dd3b3"
input_schema_fingerprint: "3563a0925e9b00ac6a343f07777ed1d48a188ece19e09f35c6e1421bee607b79"
annotations{5}
title: "Pause reminder"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
13{9}
name: "preview_voice"
title: "Preview a voice"
effect: "READ"
effect_confidence: 0.933
capabilities[2]
0{2}
capability: "MESSAGING"
confidence: 0.669
1{2}
capability: "PERSONAL_DATA"
confidence: 0.632
risk_severity: "MEDIUM"
fingerprint: "d669d3f65bad539fd870ba7f70b86b50ed5edcdfa68c93f37996130225b093b9"
input_schema_fingerprint: "87f288ed7f5b2cb12c2b30d579369e3467d21bd42829b3a588d4f0c274a44451"
annotations{5}
title: "Preview a voice"
readOnlyHint: true
destructiveHint: false
idempotentHint: false
openWorldHint: false
14{9}
name: "remove_recipient"
title: "Remove a person"
effect: "ADMIN"
effect_confidence: 0.67
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.88
risk_severity: "INFO"
fingerprint: "ae3f16aa1c3af3ccfe2f2eb90f910bd948df1b0781e6ac97754bd53e0230d015"
input_schema_fingerprint: "5dce980fafa3db63b80cdd84dd7bce9c6a55133d7d6efad455b3ff1a1e6a1985"
annotations{5}
title: "Remove a person"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
15{9}
name: "resend_recipient_verification"
title: "Resend consent call"
effect: "UNKNOWN"
effect_confidence: 0.25
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.592
1{2}
capability: "MESSAGING"
confidence: 0.558
2{2}
capability: "PERSONAL_DATA"
confidence: 0.925
risk_severity: "LOW"
fingerprint: "27cbe93d3088a43076f2791a0ba1eec1f0943ba8b52f4dcaa38d0a1c998d6f72"
input_schema_fingerprint: "2101f697c49edd956c5ee529ee158a798396b3b94b7487d5727bb4be2035c723"
annotations{5}
title: "Resend consent call"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
16{9}
name: "resume_reminder"
title: "Resume reminder"
effect: "WRITE"
effect_confidence: 0.917
capabilities[0]
risk_severity: "LOW"
fingerprint: "445f080e9cc5f894bfe22b93e709a1d434fe44db8012ae5282f9834fca669dbc"
input_schema_fingerprint: "1825cfcd6898dd4807eb11c93b7d1b3b8ee9b8b1fecce2765d25dbc19c0df1e8"
annotations{5}
title: "Resume reminder"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
17{9}
name: "set_reminder_channels"
title: "Set missed-call fallbacks"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.796
risk_severity: "MEDIUM"
fingerprint: "a00fc9825048a120ab2171b2802b058e1087f856da10954e6e9bfa7f3ff70fad"
input_schema_fingerprint: "2057c0adef11851bbb3f6c0d9b9f42de2207334246745b538eb986aaec37926e"
annotations{5}
title: "Set missed-call fallbacks"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
18{9}
name: "set_reminder_voice"
title: "Set a reminder's voice"
effect: "WRITE"
effect_confidence: 0.822
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.669
risk_severity: "MEDIUM"
fingerprint: "b2b8eb8f30ecd8af6f9d93591ca11edfc7fd9b094075b03b661847238cbaed8a"
input_schema_fingerprint: "c281f3bc5158182a8de62f9c325944c92a4e96fcceedc47343edfdc950111802"
annotations{5}
title: "Set a reminder's voice"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
19{9}
name: "set_skip_dates"
title: "Set skip dates"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "355b31ddcf1120ce7804ca58081883f2caa078435c28a675644cf462b4a16874"
input_schema_fingerprint: "bee30e69e937a93354b05365361822b099af4117ab985dc33da2c950889f1f8a"
annotations{5}
title: "Set skip dates"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
20{9}
name: "set_voice_settings"
title: "Set default voice"
effect: "WRITE"
effect_confidence: 0.885
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.669
risk_severity: "MEDIUM"
fingerprint: "e2b5a14391c0e45fa3a8abf8f725d38c64f8ece160fcb57f607be9196a8e6b41"
input_schema_fingerprint: "c75855de478cf6eda3e429d55de1ef2b1033f300e8b3884296cd996e9c379299"
annotations{5}
title: "Set default voice"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: false
21{9}
name: "skip_next_occurrence"
title: "Skip next call"
effect: "UNKNOWN"
effect_confidence: 0.278
capabilities[1]
0{2}
capability: "MESSAGING"
confidence: 0.558
risk_severity: "LOW"
fingerprint: "d10b000ce9ae6eaefcee7b5e9af4ab871b7b4b1f13fc915b6038d1cf7bbd0395"
input_schema_fingerprint: "90d0470ffcc8130d962c4813b96cf52a1cdf9a79e330cabd93a4644b30f7ef24"
annotations{5}
title: "Skip next call"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: false
22{9}
name: "test_call"
title: "Place a test call now"
effect: "WRITE"
effect_confidence: 0.67
capabilities[2]
0{2}
capability: "MESSAGING"
confidence: 0.669
1{2}
capability: "PERSONAL_DATA"
confidence: 0.632
risk_severity: "MEDIUM"
fingerprint: "79ce4d71cf1b36a0f5e0e0562d2205a074f0bff3331931c04fb17ff549fd6156"
input_schema_fingerprint: "0aa24c5e032660c6f84cb18fc400837bd811deb3374f185c4f4f4e5d41750472"
annotations{5}
title: "Place a test call now"
readOnlyHint: false
destructiveHint: true
idempotentHint: false
openWorldHint: true
23{9}
name: "update_reminder"
title: "Edit reminder"
effect: "WRITE"
effect_confidence: 0.902
capabilities[0]
risk_severity: "LOW"
fingerprint: "b2f664dbbb95db6cecd1ed4d8562144f8ac4cc0437c82cd56af601ae61576a32"
input_schema_fingerprint: "be82b32f0b5ad521376eb363ea4e4e580f5c9940b49f8d2ea20297cf837cd85b"
annotations{5}
title: "Edit reminder"
readOnlyHint: false
destructiveHint: true
idempotentHint: true
openWorldHint: true
24{9}
name: "whoami"
title: "Get account details"
effect: "READ"
effect_confidence: 0.921
capabilities[1]
0{2}
capability: "IDENTITY"
confidence: 0.5
risk_severity: "INFO"
fingerprint: "497cb3f0cdfd585efd4990849c7d9ce3303bff8cfe93609c816e1daf0b0dd977"
input_schema_fingerprint: "4fc2049c43d7f657fefe29c18df80e130aac61e5255fde54ec8d2a06d0f1aed9"
annotations{5}
title: "Get account details"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.reminderit.com"
registrable_domain: "reminderit.com"
source: "transport"
findings[109]
0{6}
check_id: "SQ-CONFORMANCE-MODERN-FAILURE"
category: "conformance"
severity: "LOW"
title: "Protocol conformance checks failed"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
3{6}
check_id: "SQ-SERVER-INSTRUCTIONS-INJECTION"
category: "prompt_injection"
severity: "CRITICAL"
title: "Server instructions contain directives to the AI model"
subject_type: "server"
subject_name: null
4{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "whoami"
5{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "create_reminder"
6{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "add_recipient"
7{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "clear_reminder_voice"
8{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "create_reminder"
9{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "delete_reminder"
10{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_recent_calls"
11{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_reminder"
12{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_usage"
13{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "get_voice_settings"
14{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "list_recipients"
15{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "list_reminders"
16{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "list_upcoming"
17{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "list_voices"
18{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "pause_reminder"
19{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "preview_voice"
20{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "remove_recipient"
21{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "resend_recipient_verification"
22{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "resume_reminder"
23{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "set_reminder_channels"
24{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "set_reminder_voice"
25{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "set_skip_dates"
26{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "set_voice_settings"
27{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "skip_next_occurrence"
28{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "test_call"
29{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "update_reminder"
30{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "whoami"
31{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "add_recipient"
32{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "add_recipient"
33{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "clear_reminder_voice"
34{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "clear_reminder_voice"
35{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "create_reminder"
36{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "create_reminder"
37{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "delete_reminder"
38{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "delete_reminder"
39{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_recent_calls"
40{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_recent_calls"
41{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_reminder"
42{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_reminder"
43{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_usage"
44{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_usage"
45{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_voice_settings"
46{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "get_voice_settings"
47{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_recipients"
48{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_recipients"
49{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_reminders"
50{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_reminders"
51{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_upcoming"
52{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_upcoming"
53{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_voices"
54{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "list_voices"
55{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "pause_reminder"
56{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "pause_reminder"
57{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "preview_voice"
58{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "preview_voice"
59{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "remove_recipient"
60{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "remove_recipient"
61{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "resend_recipient_verification"
62{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "resend_recipient_verification"
63{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "resume_reminder"
64{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "resume_reminder"
65{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_reminder_channels"
66{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_reminder_channels"
67{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_reminder_voice"
68{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_reminder_voice"
69{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_skip_dates"
70{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_skip_dates"
71{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_voice_settings"
72{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "set_voice_settings"
73{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "skip_next_occurrence"
74{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "skip_next_occurrence"
75{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "test_call"
76{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "HIGH"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "test_call"
77{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "update_reminder"
78{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "update_reminder"
79{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "whoami"
80{6}
check_id: "SQ-TOOL-EXFIL-SHAPED-PARAM"
category: "schema"
severity: "CRITICAL"
title: "Free-text parameter commonly used to collect conversation data"
subject_type: "tool"
subject_name: "whoami"
81{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "add_recipient"
82{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "clear_reminder_voice"
83{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "create_reminder"
84{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "delete_reminder"
85{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_recent_calls"
86{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_reminder"
87{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_usage"
88{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "get_voice_settings"
89{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "list_recipients"
90{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "list_reminders"
91{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "list_upcoming"
92{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "list_voices"
93{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "pause_reminder"
94{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "preview_voice"
95{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "remove_recipient"
96{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "resend_recipient_verification"
97{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "resume_reminder"
98{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "set_reminder_channels"
99{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "set_reminder_voice"
100{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "set_skip_dates"
101{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "set_voice_settings"
102{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "skip_next_occurrence"
103{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "test_call"
104{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "update_reminder"
105{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "whoami"
106{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "resend_recipient_verification"
107{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "skip_next_occurrence"
108{6}
check_id: "SQ-TOOL-RECIPIENT-REDIRECT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to change recipients or destinations"
subject_type: "tool"
subject_name: "set_voice_settings"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "com.reminderit/reminderit"
registry_content_sha256: "6464360c13314da0bdfd24eec008cc1f538d6b20135fa75319d9d328b030216c"
scan_snapshot_fingerprint: "12259028fe7ac882c87f17c743ca6a214c07643980c5ae780a513f2e68a2f6ed"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T19:58:36.032Z"
observed_at: "2026-11-14T15:45:06.419+00:00"
registry_published_at: "2026-09-30T19:39:33.328925+00:00"
registry_updated_at: null