Pre-transaction Safety Checks (Tanod)
dev.tanod/security
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/5f414269-fdbe-4d00-818d-9ee6352b7c9e/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.tanod/security"
title: "Pre-transaction Safety Checks (Tanod)"
description: "Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC."
version: "0.1.2"
homepage_url: "https://tanod.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.tanod"
display_name: "dev.tanod"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/tanod-labs/tanod-mcp"
provider: "github"
owner: "tanod-labs"
name: "tanod-mcp"
verified: false
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://tanod.dev/mcp/security"
endpoint_host: "tanod.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[27]
0{9}
name: "audit_token_approvals"
title: "chainpeek: list a wallet's live token approvals (ERC-20 and Permit2) with revoke transactions"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "743b53cd51b464c2730f70b2d905c7fe9d972ee0d04ddc4f7e57cd5889993587"
input_schema_fingerprint: "0e732c0999c8591d71d2f5bc8419785584840e09c870166884c880a95a7df6c1"
annotations{5}
title: "chainpeek: list a wallet's live token approvals (ERC-20 and Permit2) with revoke transactions"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
1{9}
name: "check_address_poisoning"
title: "chainpeek: check a transfer recipient for address poisoning on Base, Ethereum or Robinhood Chain"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.73
1{2}
capability: "PERSONAL_DATA"
confidence: 0.935
risk_severity: "MEDIUM"
fingerprint: "9804963d6a0244c9b096eb1e865168e81208164d947411ea899e81dbf543893b"
input_schema_fingerprint: "e28fce1b0e6bc0646a4634c66f6407a9b7bda2a7e0beb66c331b7f502125f8d9"
annotations{5}
title: "chainpeek: check a transfer recipient for address poisoning on Base, Ethereum or Robinhood Chain"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
2{9}
name: "check_contract_before_interaction"
title: "txpeek: check an address before a transaction"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "55c44cdf7a04fe4a0870f4c046caba5d4cfa6696eff551e5e5b0a6e199cfa788"
input_schema_fingerprint: "94603815b7e5af7d78a9bfe20211f83c7bd5bd0bf062fb3e2485c6a363373d3e"
annotations{5}
title: "txpeek: check an address before a transaction"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
3{9}
name: "check_sanctions"
title: "chainpeek: screen a crypto address against the OFAC SDN list"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "ec6de0a4d8824928b1e1a8e99709fc3f90c50ee4c434292aed2c12dee3a92ab3"
input_schema_fingerprint: "470cb8bcbec44f5f59255e6a667ea39990b06ac9b0b9c398baf670f7e90fa322"
annotations{5}
title: "chainpeek: screen a crypto address against the OFAC SDN list"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
4{9}
name: "check_sanctions_batch"
title: "chainpeek: screen up to 1,000 crypto addresses against the OFAC SDN list"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "f024a7ad23acb4f940a5420878f3769a55bb851642f10393c1d9f7e30155aa84"
input_schema_fingerprint: "2b571c881a08190560772da3d6e35045d0cb3bc48f7e6d7519f9b233fda93f73"
annotations{5}
title: "chainpeek: screen up to 1,000 crypto addresses against the OFAC SDN list"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
5{9}
name: "check_security_headers"
title: "sitepeek: grade a page's HTTP security headers (HSTS, CSP, cookies, ...)"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.875
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.908
risk_severity: "INFO"
fingerprint: "02e99cd2a08500da7e15d198cebe02c60ee4e52b2ec5e4cba045ffd5183f36f5"
input_schema_fingerprint: "ffc587c40328246881bc83ab6ffae205d7fd6d9ab595163e4f744d8c0f82b8cb"
annotations{5}
title: "sitepeek: grade a page's HTTP security headers (HSTS, CSP, cookies, ...)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
6{9}
name: "check_solana_token_safety"
title: "chainpeek: Solana token safety and rug check: mint and freeze authority, top holders, sell quote, risk level"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "b11dbad7c2846fe474be4c0f28164cdca0ee0bafe476886b4ea39916876e37cb"
input_schema_fingerprint: "04ae834270f24cfe7c1e9367f88ce00e00e8e0300387593b2c9dae6386ee800e"
annotations{5}
title: "chainpeek: Solana token safety and rug check: mint and freeze authority, top holders, sell quote, risk level"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
7{9}
name: "check_text_for_secrets"
title: "utilpeek: scan a text for leaked API keys, tokens, private keys and seed phrases before it is posted"
effect: "READ"
effect_confidence: 0.796
capabilities[3]
0{2}
capability: "AUTHENTICATION"
confidence: 0.718
1{2}
capability: "MESSAGING"
confidence: 0.594
2{2}
capability: "SECRETS"
confidence: 0.99
risk_severity: "HIGH"
fingerprint: "38b330ec54e5e6a267cd51aeecf51deffadc47437e688087e11d76e820f0bec1"
input_schema_fingerprint: "f9b9b84615853461a1718331f1534bbcb89464d7fe954829fd9dc11a25809710"
annotations{5}
title: "utilpeek: scan a text for leaked API keys, tokens, private keys and seed phrases before it is posted"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
8{9}
name: "check_token_honeypot"
title: "chainpeek: honeypot check, can this token be sold? Simulated buy and sell with tax on Base or Ethereum"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.834
risk_severity: "MEDIUM"
fingerprint: "2b5d9d82838770a75849a8b493e6d0a2f57692b59231f21248f72b79544b6df9"
input_schema_fingerprint: "7d94a8e84823e719a7badca551892d687a9db8e56aa27a3aaa130ccdb1d5365c"
annotations{5}
title: "chainpeek: honeypot check, can this token be sold? Simulated buy and sell with tax on Base or Ethereum"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
9{9}
name: "check_token_safety"
title: "chainpeek: token safety check for an ERC-20 on Base or Ethereum: honeypot, tax and contract risk in one verdict"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.584
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.646
risk_severity: "LOW"
fingerprint: "3e0230b32c5953f41d05c4f88539857e12fc23571e0ae9fba2382422733642a9"
input_schema_fingerprint: "85b3866f0b16a8f961581df6fc9602df5d713802ecd6ad2bbeda7f0ca5ac266f"
annotations{5}
title: "chainpeek: token safety check for an ERC-20 on Base or Ethereum: honeypot, tax and contract risk in one verdict"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
10{9}
name: "check_url_phishing"
title: "chainpeek: screen a URL or domain against phishing lists"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.966
risk_severity: "INFO"
fingerprint: "ad4cbcbde0e1e76d64fa322019eabd56fbff5d9ccdd1edf55b7c0004909e6592"
input_schema_fingerprint: "6c93545250dff392c0190a5d2018be1eb0fcbb924a2a45b03bc711b7508f5d7b"
annotations{5}
title: "chainpeek: screen a URL or domain against phishing lists"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
11{9}
name: "check_urls_phishing_batch"
title: "chainpeek: screen up to 1,000 URLs or domains against phishing lists"
effect: "READ"
effect_confidence: 0.798
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.711
risk_severity: "INFO"
fingerprint: "112929bba1dbbc5f395fc4a31903b437d7bd019ebc3fd84c1180f64bfee0cf8d"
input_schema_fingerprint: "316a29ec2e12d572050ab7e8ae90226cffaa26469582313699afc51655be956e"
annotations{5}
title: "chainpeek: screen up to 1,000 URLs or domains against phishing lists"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
12{9}
name: "check_wallet_drain"
title: "chainpeek: check a wallet for a drain: tokens pulled out in transactions it did not send"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "7b7b3fe2ab50faf2d71ba8cbabb95ffb07ef068bed589c1f4daeddec5c51b74b"
input_schema_fingerprint: "edaae3d1df333bec4150fdb9a8d86a0c998c77e980ec5336361b2c731790c321"
annotations{5}
title: "chainpeek: check a wallet for a drain: tokens pulled out in transactions it did not send"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
13{9}
name: "decode_calldata"
title: "chainpeek: decode EVM calldata"
effect: "READ"
effect_confidence: 0.762
capabilities[0]
risk_severity: "INFO"
fingerprint: "7a7d203b426a11a6cc29fbe55086dd2aa464eacc0b3a838a34e9f2a026d042b4"
input_schema_fingerprint: "b059b9a40e71b4a47e6ac387807a8914ce226fc3f9a4b2e8c52ea598689010ec"
annotations{5}
title: "chainpeek: decode EVM calldata"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
14{9}
name: "detect_proxy"
title: "chainpeek: detect a proxy contract and its implementation"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.88
risk_severity: "INFO"
fingerprint: "0cd9f8171346a02a61a70b19bc70851cd7aa419d24aee8284b039de297d0e7c6"
input_schema_fingerprint: "dce9cd50096488a2c781a9418318ec59adb40ec4e2d0487839980972a563ba90"
annotations{5}
title: "chainpeek: detect a proxy contract and its implementation"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
15{9}
name: "get_allowance"
title: "chainpeek: get an ERC-20 allowance"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "MEDIUM"
fingerprint: "e732182f703b184a01fcf0f9deed3d6a763ffb8d4c69672547a21d2effc3577e"
input_schema_fingerprint: "4cd736c87cb4cb76dfb6e1f8aed467218cad055b52c9ad622399b9d44fa6a53e"
annotations{5}
title: "chainpeek: get an ERC-20 allowance"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
16{9}
name: "get_verification_code"
title: "dnspeek: read the one-time code or verification link from an email; the email body is never returned"
effect: "READ"
effect_confidence: 0.762
capabilities[4]
0{2}
capability: "AUTHENTICATION"
confidence: 0.96
1{2}
capability: "EMAIL"
confidence: 0.775
2{2}
capability: "PERSONAL_DATA"
confidence: 0.74
3{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.61
risk_severity: "MEDIUM"
fingerprint: "469ae780472850231824d3bd7ca984a6edf1cbf7cedb9b575866d6e897d75667"
input_schema_fingerprint: "07bbfa14b9492988bfbcc0820b940003eb112496c08dec5ebb97645b6a9cb823"
annotations{5}
title: "dnspeek: read the one-time code or verification link from an email; the email body is never returned"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
17{9}
name: "get_wallet_counterparties"
title: "chainpeek: who does a wallet transact with? Top counterparties by transfers and USD volume, 1-90 days"
effect: "READ"
effect_confidence: 0.798
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.734
risk_severity: "LOW"
fingerprint: "9f27a3d969ccaf74b43561ab829e6b0a5e3afe62aa9ff866ae384eb5710b0da7"
input_schema_fingerprint: "550d0b72f5f5eecd7d3a88f26beb640dd943b3f917b0e6d34863e81cdcb778fc"
annotations{5}
title: "chainpeek: who does a wallet transact with? Top counterparties by transfers and USD volume, 1-90 days"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
18{9}
name: "inspect_domain"
title: "dnspeek: inspect a domain's DNS, email auth and TLS"
effect: "READ"
effect_confidence: 0.762
capabilities[3]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.82
1{2}
capability: "EMAIL"
confidence: 0.61
2{2}
capability: "PERSONAL_DATA"
confidence: 0.68
risk_severity: "MEDIUM"
fingerprint: "776b27cd28532443efb4d626741aeeb7b03ab6fa68d7511d5b86d70f9e6607a6"
input_schema_fingerprint: "8aaae70ba6d57ac5fc22627e770aaf545e1a80b37c8808a6fb08fd0190e4e394"
annotations{5}
title: "dnspeek: inspect a domain's DNS, email auth and TLS"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
19{9}
name: "rdap_lookup"
title: "dnspeek: RDAP (whois) lookup of a domain, IP or AS number"
effect: "READ"
effect_confidence: 0.66
capabilities[0]
risk_severity: "INFO"
fingerprint: "6e459be583e95bcc5028aa44453bbc6394bf08dfc1a4a297cafc7bc4822b88ea"
input_schema_fingerprint: "ddbfc6ef3c52d2cf1dff34f52cc007df306eda757472661217de9a0f0fd9e1b0"
annotations{5}
title: "dnspeek: RDAP (whois) lookup of a domain, IP or AS number"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
20{9}
name: "repo_info"
title: "utilpeek: GitHub repository health facts (stars, licence, release, dependents, Scorecard)"
effect: "READ"
effect_confidence: 0.422
capabilities[5]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.59
1{2}
capability: "EXTERNAL_COMMUNICATION"
confidence: 0.811
2{2}
capability: "HEALTH"
confidence: 0.669
3{2}
capability: "SENSITIVE_PERSONAL_DATA"
confidence: 0.669
4{2}
capability: "SOURCE_CODE"
confidence: 0.981
risk_severity: "MEDIUM"
fingerprint: "bb7c0ef7eab381c0e526347baf82c79dbea4d311f6b3c7ffb22b77528f051b96"
input_schema_fingerprint: "2a11018fecdca26d0d39a7a5807eb7866eba47137e9738f76e7541e15dec5f92"
annotations{5}
title: "utilpeek: GitHub repository health facts (stars, licence, release, dependents, Scorecard)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
21{9}
name: "scan_agent_package"
title: "toolsniff: scan an agent skill or MCP server before installing it"
effect: "READ"
effect_confidence: 0.762
capabilities[2]
0{2}
capability: "FILE_ACCESS"
confidence: 0.681
1{2}
capability: "SOURCE_CODE"
confidence: 0.539
risk_severity: "INFO"
fingerprint: "a82ec4bf9aae7640af92ca65926d0cf21eaab338eacba839540084f6fa777b92"
input_schema_fingerprint: "50b0396f5b605b7d65270b5ecf4f3e1f1e0289ac333f98e9122caa04a153266b"
annotations{5}
title: "toolsniff: scan an agent skill or MCP server before installing it"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
22{9}
name: "scan_contract_address"
title: "pactlint: scan a deployed contract by address"
effect: "READ"
effect_confidence: 0.762
capabilities[1]
0{2}
capability: "SECURITY_CONTROL"
confidence: 0.52
risk_severity: "INFO"
fingerprint: "ffd12595be7e5508721d396a94524bc3d64ccd224f5ec304492273967bd99811"
input_schema_fingerprint: "389b6d039436799198191a4ef711230676fde6296daf6f1d453491cdb9a4753f"
annotations{5}
title: "pactlint: scan a deployed contract by address"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
23{9}
name: "scan_contract_source"
title: "pactlint: scan Solidity source"
effect: "READ"
effect_confidence: 0.762
capabilities[3]
0{2}
capability: "FILE_ACCESS"
confidence: 0.661
1{2}
capability: "SECURITY_CONTROL"
confidence: 0.52
2{2}
capability: "SOURCE_CODE"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "71bd9c649b01c7a3bcba6a6449e964a27cc5d71d36c39a374c37675b0ee88793"
input_schema_fingerprint: "ed065bc455240f1c24be7365b9c4254d19cafdd35fe5ddd5d35a5306469c1a14"
annotations{5}
title: "pactlint: scan Solidity source"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
24{9}
name: "text_unicode_inspect"
title: "utilpeek: inspect a text for hidden or look-alike Unicode"
effect: "READ"
effect_confidence: 0.711
capabilities[0]
risk_severity: "INFO"
fingerprint: "87c0f6dcc50718ae63467340b73e350f02c6eb3a8c775d0b0c39b31a5d1a06b7"
input_schema_fingerprint: "8351249c30dc139e487edc1b41b114eef838079c150e814697f46cea20092822"
annotations{5}
title: "utilpeek: inspect a text for hidden or look-alike Unicode"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: false
25{9}
name: "token_verdict"
title: "chainpeek: plain-language token risk verdict for an ERC-20 on Base or Ethereum, with a shareable PNG card"
effect: "UNKNOWN"
effect_confidence: 0.15
capabilities[0]
risk_severity: "LOW"
fingerprint: "27e83d4efa82360800a744f2c4c0e3fc05022e224f215b092d6693410c2b21dd"
input_schema_fingerprint: "c41a752f1664014e4ac73e869fc7dc62122e7346977d97a17b0a4176c79d6586"
annotations{5}
title: "chainpeek: plain-language token risk verdict for an ERC-20 on Base or Ethereum, with a shareable PNG card"
readOnlyHint: false
destructiveHint: false
idempotentHint: true
openWorldHint: true
26{9}
name: "verify_email"
title: "dnspeek: verify an email address (syntax + DNS, no SMTP)"
effect: "READ"
effect_confidence: 0.827
capabilities[3]
0{2}
capability: "ACCOUNT_MANAGEMENT"
confidence: 0.844
1{2}
capability: "EMAIL"
confidence: 0.859
2{2}
capability: "PERSONAL_DATA"
confidence: 0.792
risk_severity: "MEDIUM"
fingerprint: "9894ef9b58c82a01e875560b6e1d7e680b69ef8de33256a7ba009771f1f60b22"
input_schema_fingerprint: "fd1d97c77427665616953ef000717e5512859b5671b7596a9278a51c1dc47277"
annotations{5}
title: "dnspeek: verify an email address (syntax + DNS, no SMTP)"
readOnlyHint: true
destructiveHint: false
idempotentHint: true
openWorldHint: true
resources[0]
prompts[4]
0{2}
name: "check-link"
fingerprint: "93f5ad5ae17510755e38553d042ad8fb57866ea04e8a1248d1674e226c55693c"
1{2}
name: "check-token"
fingerprint: "a82287ebb298241c8eb689325587c6c80d195f1bb408d35c5e526466cdae4b2d"
2{2}
name: "email-security"
fingerprint: "5c7f44feed4b934e974d2ca3cd0d83935f6b3139e3ab3430f7420be36ff1e00d"
3{2}
name: "sanctions-check"
fingerprint: "56ae68dfa1812ff083215b18b76f9b312cfe3fd89f5a005807cae0aa831b70bb"
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "tanod.dev"
registrable_domain: "tanod.dev"
source: "transport"
findings[7]
0{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_address_poisoning"
1{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "check_token_honeypot"
2{6}
check_id: "SQ-TOOL-CREDENTIAL-ARGUMENT"
category: "schema"
severity: "MEDIUM"
title: "Asks the AI model to supply credentials as arguments"
subject_type: "tool"
subject_name: "get_allowance"
3{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "rdap_lookup"
4{6}
check_id: "SQ-TOOL-META-INSUFFICIENT"
category: "tool_design"
severity: "LOW"
title: "Description too thin to determine behavior"
subject_type: "tool"
subject_name: "token_verdict"
5{6}
check_id: "SQ-TOOL-MIXED-SCRIPT"
category: "deceptive_metadata"
severity: "CRITICAL"
title: "Look-alike characters from mixed scripts"
subject_type: "tool"
subject_name: "text_unicode_inspect"
6{6}
check_id: "SQ-TOOL-SENSITIVE-PATH-REFERENCE"
category: "prompt_injection"
severity: "HIGH"
title: "References credential or key locations"
subject_type: "tool"
subject_name: "check_text_for_secrets"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.tanod/security"
registry_content_sha256: "0d05f39b8288842d330db434f5f298201f3f7216a69b0cd4721009a40a51304e"
scan_snapshot_fingerprint: "4ed1d404bb41fb6889e133eb7c5630d6107e5196cd1737a677a46fdf79f80a10"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T03:39:27.055Z"
observed_at: "2026-11-09T14:56:02.373+00:00"
registry_published_at: "2026-11-09T13:39:30.052861+00:00"
registry_updated_at: null