@kryptosai/mcp-observatory 0.28.0 → 1.28.1

package/docs/safety-index/artifacts/context7-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-07-06T014654306Z_160413b5",
-  "createdAt": "2026-07-06T01:46:54.306Z",
-  "toolVersion": "0.26.1",
+  "runId": "run_2026-07-06T194948132Z_cb0c4915",
+  "createdAt": "2026-07-06T19:49:48.132Z",
+  "toolVersion": "0.28.0",
   "target": {
     "targetId": "context7-server",
     "adapter": "local-process",
@@ -22,17 +22,17 @@
       "whyItMatters": "Documentation retrieval tools can return untrusted text into agent context."
     },
     "serverName": "Context7",
-    "serverVersion": "3.2.2"
+    "serverVersion": "3.2.3"
   },
   "environment": {
-    "platform": "darwin 24.0.0",
-    "nodeVersion": "v25.8.1"
+    "platform": "darwin 25.5.0",
+    "nodeVersion": "v22.22.1"
   },
   "summary": {
-    "total": 7,
+    "total": 8,
     "pass": 7,
     "fail": 0,
-    "partial": 0,
+    "partial": 1,
     "unsupported": 0,
     "flaky": 0,
     "skipped": 0,
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 1.7208330000003116,
+      "durationMs": 1.788749999999709,
       "message": "Advertised capability responded with the minimal expected shape (2 items).",
       "evidence": [
         {
@@ -57,7 +57,7 @@
             "query-docs"
           ],
           "diagnostics": [
-            "Context7 Documentation MCP Server v3.2.2 running on stdio"
+            "Context7 Documentation MCP Server v3.2.3 running on stdio"
           ],
           "schemas": {
             "resolve-library-id": {
@@ -87,7 +87,7 @@
                 },
                 "query": {
                   "type": "string",
-                  "description": "The question or task you need help with. Be specific and include relevant details. Good: 'How to set up authentication with JWT in Express.js' or 'React useEffect cleanup function examples'. Bad: 'auth' or 'hooks'. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query."
+                  "description": "The question or task you need help with, scoped to a single concept. Be specific and include relevant details, but keep each query to one topic — if the user's question spans multiple distinct concepts, make a separate call per concept instead of combining them, unless the question is about how the concepts interact. Good: 'How to set up authentication with JWT in Express.js' or 'React useEffect cleanup function examples'. Bad (too vague): 'auth' or 'hooks'. Bad (too broad): 'routing and auth and caching in Next.js'. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query."
                 }
               },
               "required": [
@@ -104,7 +104,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "pass",
-      "durationMs": 0.2972090000002936,
+      "durationMs": 0.2839160000003176,
       "message": "Advertised capability responded with the minimal expected shape (0 items).",
       "evidence": [
         {
@@ -115,7 +115,7 @@
           "itemCount": 0,
           "identifiers": [],
           "diagnostics": [
-            "Context7 Documentation MCP Server v3.2.2 running on stdio"
+            "Context7 Documentation MCP Server v3.2.3 running on stdio"
           ]
         }
       ]
@@ -124,7 +124,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "pass",
-      "durationMs": 0.4392909999996846,
+      "durationMs": 0.4017499999999927,
       "message": "Advertised capability responded with the minimal expected shape (0 items).",
       "evidence": [
         {
@@ -135,7 +135,7 @@
           "itemCount": 0,
           "identifiers": [],
           "diagnostics": [
-            "Context7 Documentation MCP Server v3.2.2 running on stdio"
+            "Context7 Documentation MCP Server v3.2.3 running on stdio"
           ]
         },
         {
@@ -146,7 +146,7 @@
           "itemCount": 0,
           "identifiers": [],
           "diagnostics": [
-            "Context7 Documentation MCP Server v3.2.2 running on stdio"
+            "Context7 Documentation MCP Server v3.2.3 running on stdio"
           ]
         }
       ]
@@ -155,7 +155,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.023624999999810825,
+      "durationMs": 0.02495900000030815,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -171,7 +171,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 0.7742079999998168,
+      "durationMs": 1.094916000000012,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -197,7 +197,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 0.6652500000000146,
+      "durationMs": 0.5149579999997513,
       "message": "All 2 item(s) have good schema quality.",
       "evidence": [
         {
@@ -214,7 +214,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 0.29783299999962765,
+      "durationMs": 0.20175000000017462,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -225,10 +225,66 @@
           "itemCount": 0
         }
       ]
+    },
+    {
+      "id": "attack-sim",
+      "capability": "attack-sim",
+      "status": "partial",
+      "durationMs": 1.0464579999998023,
+      "message": "Safe attack simulation found 2 finding(s): 0 high, 2 medium, 0 low.",
+      "evidence": [
+        {
+          "endpoint": "attack-sim/safe",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 2,
+          "identifiers": [
+            "resolve-library-id",
+            "query-docs"
+          ],
+          "diagnostics": [
+            "[medium] tool \"resolve-library-id\" contains agent behavior control text that could steer an agent.",
+            "[medium] tool \"query-docs\" contains agent behavior control text that could steer an agent."
+          ],
+          "findings": [
+            {
+              "ruleId": "attack-sim/tool-poisoning/agent-behavior-control",
+              "attackClass": "tool-poisoning",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "resolve-library-id",
+              "message": "tool \"resolve-library-id\" contains agent behavior control text that could steer an agent.",
+              "evidence": {
+                "path": "description",
+                "excerpt": "Resolves a package/product name to a Context7-compatible library ID and returns matching libraries.\n\nYou MUST call this function before 'Query Documentation' tool to obtain a valid Context7-compatible library ID UNLESS the user explicitly p",
+                "match": "MUST call this function before 'Query Documentation' tool"
+              },
+              "recommendation": "Remove hidden or behavioral instructions from MCP metadata; keep descriptions factual and user-visible.",
+              "recommendedAction": "gate"
+            },
+            {
+              "ruleId": "attack-sim/tool-poisoning/agent-behavior-control",
+              "attackClass": "tool-poisoning",
+              "severity": "medium",
+              "itemType": "tool",
+              "itemName": "query-docs",
+              "message": "tool \"query-docs\" contains agent behavior control text that could steer an agent.",
+              "evidence": {
+                "path": "description",
+                "excerpt": "Retrieves and queries up-to-date documentation and code examples from Context7 for any programming library or framework.\n\nYou must call 'Resolve Context7 Library ID' tool first to obtain the exact Context7-compatible library ID required to ",
+                "match": "must call 'Resolve Context7 Library ID' tool"
+              },
+              "recommendation": "Remove hidden or behavioral instructions from MCP metadata; keep descriptions factual and user-visible.",
+              "recommendedAction": "gate"
+            }
+          ]
+        }
+      ]
     }
   ],
   "healthScore": {
-    "overall": 100,
+    "overall": 97,
     "grade": "A",
     "dimensions": [
       {
@@ -250,10 +306,11 @@
       {
         "name": "Security",
         "weight": 0.2,
-        "score": 100,
+        "score": 87,
         "details": [
           "security-lite: pass (100/100)",
-          "security: pass (100/100)"
+          "security: pass (100/100)",
+          "attack-sim: partial (60/100)"
         ]
       },
       {
@@ -271,16 +328,16 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 817ms",
+          "Connect: 753ms",
           "p95 latency: 2ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 817.0577499999995,
-    "toolsListMs": 1.7208330000003116,
-    "promptsListMs": 0.2972090000002936,
-    "resourcesListMs": 0.4392909999996846
+    "connectMs": 753.3337500000002,
+    "toolsListMs": 1.788749999999709,
+    "promptsListMs": 0.2839160000003176,
+    "resourcesListMs": 0.4017499999999927
   }
 }

package/docs/safety-index/artifacts/context7-server.md

@@ -1,42 +1,42 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-06T01:46:54.306Z
+Generated at 2026-07-06T19:49:48.132Z
 
 ## Target and Environment Metadata
 
 - Target: `context7-server`
 - Adapter: `local-process`
 - Command: `npx -y @upstash/context7-mcp`
-- Server: `Context7 3.2.2`
-- Platform: `darwin 24.0.0`
-- Node: `v25.8.1`
+- Server: `Context7 3.2.3`
+- Platform: `darwin 25.5.0`
+- Node: `v22.22.1`
 
 ## Executive Summary
 
-**Health Score: 100/100 (A)**
+**Health Score: 97/100 (A)**
 
 | Dimension | Score | Weight |
 | --- | --- | --- |
 | Protocol Compliance | 100/100 | 30% |
 | Schema Quality | 100/100 | 20% |
-| Security | 100/100 | 20% |
+| Security | 87/100 | 20% |
 | Reliability | 100/100 | 20% |
 | Performance | 100/100 | 10% |
 
 | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| pass | 7 | 7 | 0 | 0 | 0 | 0 | 0 |
+| pass | 8 | 7 | 0 | 1 | 0 | 0 | 0 |
 
 ## At a Glance
 
-- Safety verdict: **Ready** — No blocking MCP compatibility or security issues were detected.
-- Top risks: No high-priority risks detected.
+- Safety verdict: **Needs review** — The server is usable, but caveated checks should be reviewed before agents depend on it.
+- Top risks: attack-sim: Safe attack simulation found 2 finding(s): 0 high, 2 medium, 0 low.
 - Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
 - Failing checks: none
-- Partial or flaky checks: none
+- Partial or flaky checks: attack-sim
 - Skipped checks: none
 - Unsupported checks: none
-- Suggested next step: Save this run artifact and diff it against the next meaningful server or package change.
+- Suggested next step: Review the caveated checks next: attack-sim.
 - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
 
 ## Regressions and Recoveries
@@ -47,13 +47,14 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 0.77 | All 7 conformance checks passed. |
-| healthy | prompts | pass | 0.30 | Advertised capability responded with the minimal expected shape (0 items). |
-| healthy | resources | pass | 0.44 | Advertised capability responded with the minimal expected shape (0 items). |
-| healthy | schema-quality | pass | 0.67 | All 2 item(s) have good schema quality. |
-| healthy | security | pass | 0.30 | No security issues detected. |
+| healthy | conformance | pass | 1.09 | All 7 conformance checks passed. |
+| healthy | prompts | pass | 0.28 | Advertised capability responded with the minimal expected shape (0 items). |
+| healthy | resources | pass | 0.40 | Advertised capability responded with the minimal expected shape (0 items). |
+| healthy | schema-quality | pass | 0.51 | All 2 item(s) have good schema quality. |
+| healthy | security | pass | 0.20 | No security issues detected. |
 | healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 1.72 | Advertised capability responded with the minimal expected shape (2 items). |
+| healthy | tools | pass | 1.79 | Advertised capability responded with the minimal expected shape (2 items). |
+| review | attack-sim | partial | 1.05 | Safe attack simulation found 2 finding(s): 0 high, 2 medium, 0 low. |
 
 ## Evidence Snippets
 
@@ -79,7 +80,7 @@ Summary: Advertised capability responded with the minimal expected shape (0 item
   - Minimal shape present: `true`
   - Item count: `0`
   - Identifiers: none
-  - Diagnostics: Context7 Documentation MCP Server v3.2.2 running on stdio
+  - Diagnostics: Context7 Documentation MCP Server v3.2.3 running on stdio
 
 ### resources — pass
 
@@ -91,14 +92,14 @@ Summary: Advertised capability responded with the minimal expected shape (0 item
   - Minimal shape present: `true`
   - Item count: `0`
   - Identifiers: none
-  - Diagnostics: Context7 Documentation MCP Server v3.2.2 running on stdio
+  - Diagnostics: Context7 Documentation MCP Server v3.2.3 running on stdio
 - Endpoint: `resources/templates/list`
   - Advertised: `true`
   - Responded: `true`
   - Minimal shape present: `true`
   - Item count: `0`
   - Identifiers: none
-  - Diagnostics: Context7 Documentation MCP Server v3.2.2 running on stdio
+  - Diagnostics: Context7 Documentation MCP Server v3.2.3 running on stdio
 
 ### schema-quality — pass
 
@@ -146,7 +147,19 @@ Summary: Advertised capability responded with the minimal expected shape (2 item
   - Minimal shape present: `true`
   - Item count: `2`
   - Identifiers: resolve-library-id, query-docs
-  - Diagnostics: Context7 Documentation MCP Server v3.2.2 running on stdio
+  - Diagnostics: Context7 Documentation MCP Server v3.2.3 running on stdio
+
+### attack-sim — partial
+
+Summary: Safe attack simulation found 2 finding(s): 0 high, 2 medium, 0 low.
+
+- Endpoint: `attack-sim/safe`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `2`
+  - Identifiers: resolve-library-id, query-docs
+  - Diagnostics: [medium] tool "resolve-library-id" contains agent behavior control text that could steer an agent., [medium] tool "query-docs" contains agent behavior control text that could steer an agent.
 
 ## Reproduction Commands
 
@@ -159,5 +172,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-06T014654306Z_160413b5`
+- Run ID: `run_2026-07-06T194948132Z_cb0c4915`
 - Gate: `pass`