@kryptosai/mcp-observatory 1.31.0 → 1.32.1

package/docs/safety-index/artifacts/context7-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "pass",
-  "runId": "run_2026-07-06T194948132Z_cb0c4915",
-  "createdAt": "2026-07-06T19:49:48.132Z",
-  "toolVersion": "0.28.0",
+  "runId": "run_2026-07-12T234358225Z_413de3e9",
+  "createdAt": "2026-07-12T23:43:58.225Z",
+  "toolVersion": "1.31.0",
   "target": {
     "targetId": "context7-server",
     "adapter": "local-process",
@@ -29,8 +29,8 @@
     "nodeVersion": "v22.22.1"
   },
   "summary": {
-    "total": 8,
-    "pass": 7,
+    "total": 9,
+    "pass": 8,
     "fail": 0,
     "partial": 1,
     "unsupported": 0,
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 1.788749999999709,
+      "durationMs": 2.009208000000399,
       "message": "Advertised capability responded with the minimal expected shape (2 items).",
       "evidence": [
         {
@@ -104,7 +104,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "pass",
-      "durationMs": 0.2839160000003176,
+      "durationMs": 0.3101249999999709,
       "message": "Advertised capability responded with the minimal expected shape (0 items).",
       "evidence": [
         {
@@ -124,7 +124,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "pass",
-      "durationMs": 0.4017499999999927,
+      "durationMs": 0.4524590000000899,
       "message": "Advertised capability responded with the minimal expected shape (0 items).",
       "evidence": [
         {
@@ -155,7 +155,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "pass",
-      "durationMs": 0.02495900000030815,
+      "durationMs": 0.05579200000011042,
       "message": "No security issues detected (lightweight scan).",
       "evidence": [
         {
@@ -167,11 +167,52 @@
         }
       ]
     },
+    {
+      "id": "runtime-profile",
+      "capability": "runtime-profile",
+      "status": "pass",
+      "durationMs": 0.4583330000004935,
+      "message": "Detected 2 potential egress target(s) and 1 potential state mutation(s) with low confidence.",
+      "evidence": [
+        {
+          "endpoint": "runtime-profile/analyze",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 3,
+          "diagnostics": [
+            "Egress entries: 2",
+            "State mutations: 1",
+            "Confidence: medium"
+          ],
+          "findings": [
+            {
+              "target": "The question or task you need help with. This is used to rank library results by relevance to what the user is trying to accomplish. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query.",
+              "protocol": "unknown",
+              "source": "description_analysis",
+              "confidence": "medium"
+            },
+            {
+              "target": "The question or task you need help with, scoped to a single concept. Be specific and include relevant details, but keep each query to one topic — if the user's question spans multiple distinct concepts, make a separate call per concept instead of combining them, unless the question is about how the concepts interact. Good: 'How to set up authentication with JWT in Express.js' or 'React useEffect cleanup function examples'. Bad (too vague): 'auth' or 'hooks'. Bad (too broad): 'routing and auth and caching in Next.js'. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query.",
+              "protocol": "unknown",
+              "source": "description_analysis",
+              "confidence": "medium"
+            },
+            {
+              "resource": "filesystem",
+              "operation": "write",
+              "scope": "working_directory",
+              "source": "description_analysis"
+            }
+          ]
+        }
+      ]
+    },
     {
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 1.094916000000012,
+      "durationMs": 2.025666999999885,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -197,7 +238,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "pass",
-      "durationMs": 0.5149579999997513,
+      "durationMs": 1.3580830000000788,
       "message": "All 2 item(s) have good schema quality.",
       "evidence": [
         {
@@ -214,7 +255,7 @@
       "id": "security",
       "capability": "security",
       "status": "pass",
-      "durationMs": 0.20175000000017462,
+      "durationMs": 0.5446659999997792,
       "message": "No security issues detected.",
       "evidence": [
         {
@@ -230,7 +271,7 @@
       "id": "attack-sim",
       "capability": "attack-sim",
       "status": "partial",
-      "durationMs": 1.0464579999998023,
+      "durationMs": 2.064624999999978,
       "message": "Safe attack simulation found 2 finding(s): 0 high, 2 medium, 0 low.",
       "evidence": [
         {
@@ -328,16 +369,42 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 753ms",
+          "Connect: 1035ms",
           "p95 latency: 2ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 753.3337500000002,
-    "toolsListMs": 1.788749999999709,
-    "promptsListMs": 0.2839160000003176,
-    "resourcesListMs": 0.4017499999999927
+    "connectMs": 1034.5410000000002,
+    "toolsListMs": 2.009208000000399,
+    "promptsListMs": 0.3101249999999709,
+    "resourcesListMs": 0.4524590000000899
+  },
+  "runtimeProfile": {
+    "egress": [
+      {
+        "target": "The question or task you need help with. This is used to rank library results by relevance to what the user is trying to accomplish. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query.",
+        "protocol": "unknown",
+        "source": "description_analysis",
+        "confidence": "medium"
+      },
+      {
+        "target": "The question or task you need help with, scoped to a single concept. Be specific and include relevant details, but keep each query to one topic — if the user's question spans multiple distinct concepts, make a separate call per concept instead of combining them, unless the question is about how the concepts interact. Good: 'How to set up authentication with JWT in Express.js' or 'React useEffect cleanup function examples'. Bad (too vague): 'auth' or 'hooks'. Bad (too broad): 'routing and auth and caching in Next.js'. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query.",
+        "protocol": "unknown",
+        "source": "description_analysis",
+        "confidence": "medium"
+      }
+    ],
+    "stateMutations": [
+      {
+        "resource": "filesystem",
+        "operation": "write",
+        "scope": "working_directory",
+        "source": "description_analysis"
+      }
+    ],
+    "analyzedAt": "2026-07-12T23:43:59.263Z",
+    "confidence": "medium"
   }
 }

package/docs/safety-index/artifacts/context7-server.md

@@ -1,6 +1,6 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-06T19:49:48.132Z
+Generated at 2026-07-12T23:43:58.225Z
 
 ## Target and Environment Metadata
 
@@ -25,7 +25,7 @@ Generated at 2026-07-06T19:49:48.132Z
 
 | Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| pass | 8 | 7 | 0 | 1 | 0 | 0 | 0 |
+| pass | 9 | 8 | 0 | 1 | 0 | 0 | 0 |
 
 ## At a Glance
 
@@ -39,6 +39,34 @@ Generated at 2026-07-06T19:49:48.132Z
 - Suggested next step: Review the caveated checks next: attack-sim.
 - CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
 
+## What Was Not Tested
+
+- 🔒 network_egress: No outbound network calls were attempted during scan
+- 🔒 filesystem_mutation: Filesystem write operations were not exercised
+- ℹ️ credential_access: Credential scanning was performed (see security findings)
+- ℹ️ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
+
+## Runtime Profile
+
+### Egress Manifest
+
+The following targets were identified as potentially reachable by this server (confidence: **medium**):
+
+| Target | Protocol | Source | Confidence |
+| --- | --- | --- | --- |
+| The question or task you need help with. This is used to rank library results by relevance to what the user is trying to accomplish. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query. | unknown | description_analysis | medium |
+| The question or task you need help with, scoped to a single concept. Be specific and include relevant details, but keep each query to one topic — if the user's question spans multiple distinct concepts, make a separate call per concept instead of combining them, unless the question is about how the concepts interact. Good: 'How to set up authentication with JWT in Express.js' or 'React useEffect cleanup function examples'. Bad (too vague): 'auth' or 'hooks'. Bad (too broad): 'routing and auth and caching in Next.js'. The query is sent to the Context7 API for processing. Do not include any sensitive or confidential information such as API keys, passwords, credentials, personal data, or proprietary code in your query. | unknown | description_analysis | medium |
+
+### State Mutations
+
+The following state-modifying operations were identified from tool schemas:
+
+| Resource | Operation | Scope | Source |
+| --- | --- | --- | --- |
+| filesystem | write | working_directory | description_analysis |
+
+_Analyzed at 2026-07-12T23:43:59.263Z_
+
 ## Regressions and Recoveries
 
 _Use the `diff` command against another run artifact to classify regressions and recoveries over time._
@@ -47,14 +75,15 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 1.09 | All 7 conformance checks passed. |
-| healthy | prompts | pass | 0.28 | Advertised capability responded with the minimal expected shape (0 items). |
-| healthy | resources | pass | 0.40 | Advertised capability responded with the minimal expected shape (0 items). |
-| healthy | schema-quality | pass | 0.51 | All 2 item(s) have good schema quality. |
-| healthy | security | pass | 0.20 | No security issues detected. |
-| healthy | security-lite | pass | 0.02 | No security issues detected (lightweight scan). |
-| healthy | tools | pass | 1.79 | Advertised capability responded with the minimal expected shape (2 items). |
-| review | attack-sim | partial | 1.05 | Safe attack simulation found 2 finding(s): 0 high, 2 medium, 0 low. |
+| healthy | conformance | pass | 2.03 | All 7 conformance checks passed. |
+| healthy | prompts | pass | 0.31 | Advertised capability responded with the minimal expected shape (0 items). |
+| healthy | resources | pass | 0.45 | Advertised capability responded with the minimal expected shape (0 items). |
+| healthy | runtime-profile | pass | 0.46 | Detected 2 potential egress target(s) and 1 potential state mutation(s) with low confidence. |
+| healthy | schema-quality | pass | 1.36 | All 2 item(s) have good schema quality. |
+| healthy | security | pass | 0.54 | No security issues detected. |
+| healthy | security-lite | pass | 0.06 | No security issues detected (lightweight scan). |
+| healthy | tools | pass | 2.01 | Advertised capability responded with the minimal expected shape (2 items). |
+| review | attack-sim | partial | 2.06 | Safe attack simulation found 2 finding(s): 0 high, 2 medium, 0 low. |
 
 ## Evidence Snippets
 
@@ -101,6 +130,18 @@ Summary: Advertised capability responded with the minimal expected shape (0 item
   - Identifiers: none
   - Diagnostics: Context7 Documentation MCP Server v3.2.3 running on stdio
 
+### runtime-profile — pass
+
+Summary: Detected 2 potential egress target(s) and 1 potential state mutation(s) with low confidence.
+
+- Endpoint: `runtime-profile/analyze`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `3`
+  - Identifiers: none
+  - Diagnostics: Egress entries: 2, State mutations: 1, Confidence: medium
+
 ### schema-quality — pass
 
 Summary: All 2 item(s) have good schema quality.
@@ -172,5 +213,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-06T194948132Z_cb0c4915`
+- Run ID: `run_2026-07-12T234358225Z_413de3e9`
 - Gate: `pass`