@kryptosai/mcp-observatory 1.32.0 → 1.32.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -10
- package/README.zh-CN.md +4 -10
- package/dist/src/cli.js +1 -1
- package/dist/src/cli.js.map +1 -1
- package/dist/src/commands/enforce.d.ts +2 -2
- package/dist/src/commands/enforce.js +5 -8
- package/dist/src/commands/enforce.js.map +1 -1
- package/dist/src/commands/scan.js.map +1 -1
- package/dist/src/commands/test.js +2 -2
- package/dist/src/commands/test.js.map +1 -1
- package/dist/src/telemetry.js +2 -1
- package/dist/src/telemetry.js.map +1 -1
- package/dist/src/validate.js +5 -6
- package/dist/src/validate.js.map +1 -1
- package/docs/mcp-server-safety-index.md +68 -8
- package/docs/safety-index/artifacts/antv-chart-server.json +1452 -19
- package/docs/safety-index/artifacts/antv-chart-server.md +156 -10
- package/docs/safety-index/artifacts/brave-search-server.json +341 -0
- package/docs/safety-index/artifacts/brave-search-server.md +201 -0
- package/docs/safety-index/artifacts/browsermcp-server.json +83 -18
- package/docs/safety-index/artifacts/browsermcp-server.md +46 -12
- package/docs/safety-index/artifacts/chrome-devtools-mcp-server.json +592 -21
- package/docs/safety-index/artifacts/chrome-devtools-mcp-server.md +96 -14
- package/docs/safety-index/artifacts/clay-server.json +66 -0
- package/docs/safety-index/artifacts/clay-server.md +106 -0
- package/docs/safety-index/artifacts/cloudflare-server.json +66 -0
- package/docs/safety-index/artifacts/cloudflare-server.md +106 -0
- package/docs/safety-index/artifacts/context7-server.json +85 -18
- package/docs/safety-index/artifacts/context7-server.md +52 -11
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.json +1565 -34
- package/docs/safety-index/artifacts/cyanheads-git-mcp-server.md +178 -17
- package/docs/safety-index/artifacts/docker-server.json +395 -0
- package/docs/safety-index/artifacts/docker-server.md +204 -0
- package/docs/safety-index/artifacts/everything-server.json +145 -18
- package/docs/safety-index/artifacts/everything-server.md +56 -11
- package/docs/safety-index/artifacts/exa-server.json +400 -0
- package/docs/safety-index/artifacts/exa-server.md +207 -0
- package/docs/safety-index/artifacts/executeautomation-playwright-server.json +625 -18
- package/docs/safety-index/artifacts/executeautomation-playwright-server.md +95 -11
- package/docs/safety-index/artifacts/fetch-server.json +66 -0
- package/docs/safety-index/artifacts/fetch-server.md +106 -0
- package/docs/safety-index/artifacts/figma-server.json +1766 -0
- package/docs/safety-index/artifacts/figma-server.md +256 -0
- package/docs/safety-index/artifacts/filesystem-mcp-server.json +428 -24
- package/docs/safety-index/artifacts/filesystem-mcp-server.md +75 -14
- package/docs/safety-index/artifacts/filesystem-server.json +426 -22
- package/docs/safety-index/artifacts/filesystem-server.md +73 -12
- package/docs/safety-index/artifacts/firecrawl-server.json +4056 -0
- package/docs/safety-index/artifacts/firecrawl-server.md +243 -0
- package/docs/safety-index/artifacts/github-mcp-server.json +374 -21
- package/docs/safety-index/artifacts/github-mcp-server.md +71 -15
- package/docs/safety-index/artifacts/gitlab-server.json +229 -0
- package/docs/safety-index/artifacts/gitlab-server.md +753 -0
- package/docs/safety-index/artifacts/gmail-server.json +66 -0
- package/docs/safety-index/artifacts/gmail-server.md +106 -0
- package/docs/safety-index/artifacts/google-calendar-server.json +66 -0
- package/docs/safety-index/artifacts/google-calendar-server.md +106 -0
- package/docs/safety-index/artifacts/google-drive-server.json +66 -0
- package/docs/safety-index/artifacts/google-drive-server.md +106 -0
- package/docs/safety-index/artifacts/google-sheets-server.json +66 -0
- package/docs/safety-index/artifacts/google-sheets-server.md +106 -0
- package/docs/safety-index/artifacts/google-tasks-server.json +66 -0
- package/docs/safety-index/artifacts/google-tasks-server.md +106 -0
- package/docs/safety-index/artifacts/huggingface-server.json +66 -0
- package/docs/safety-index/artifacts/huggingface-server.md +106 -0
- package/docs/safety-index/artifacts/jina-server.json +66 -0
- package/docs/safety-index/artifacts/jina-server.md +106 -0
- package/docs/safety-index/artifacts/kubernetes-server.json +1054 -27
- package/docs/safety-index/artifacts/kubernetes-server.md +137 -18
- package/docs/safety-index/artifacts/linear-server.json +1494 -0
- package/docs/safety-index/artifacts/linear-server.md +237 -0
- package/docs/safety-index/artifacts/memory-server.json +191 -18
- package/docs/safety-index/artifacts/memory-server.md +51 -9
- package/docs/safety-index/artifacts/mongodb-server.json +66 -0
- package/docs/safety-index/artifacts/mongodb-server.md +106 -0
- package/docs/safety-index/artifacts/neon-server.json +66 -0
- package/docs/safety-index/artifacts/neon-server.md +103 -0
- package/docs/safety-index/artifacts/notion-server.json +7151 -0
- package/docs/safety-index/artifacts/notion-server.md +236 -0
- package/docs/safety-index/artifacts/onesignal-server.json +66 -0
- package/docs/safety-index/artifacts/onesignal-server.md +106 -0
- package/docs/safety-index/artifacts/opentofu-server.json +31 -19
- package/docs/safety-index/artifacts/opentofu-server.md +28 -10
- package/docs/safety-index/artifacts/playwright-mcp-server.json +415 -24
- package/docs/safety-index/artifacts/playwright-mcp-server.md +84 -20
- package/docs/safety-index/artifacts/postgres-server.json +330 -0
- package/docs/safety-index/artifacts/postgres-server.md +208 -0
- package/docs/safety-index/artifacts/promptopia-server.json +96 -19
- package/docs/safety-index/artifacts/promptopia-server.md +43 -9
- package/docs/safety-index/artifacts/puppeteer-server.json +118 -29
- package/docs/safety-index/artifacts/puppeteer-server.md +61 -19
- package/docs/safety-index/artifacts/qdrant-server.json +66 -0
- package/docs/safety-index/artifacts/qdrant-server.md +106 -0
- package/docs/safety-index/artifacts/reddit-server.json +66 -0
- package/docs/safety-index/artifacts/reddit-server.md +106 -0
- package/docs/safety-index/artifacts/ref-tools-server.json +95 -18
- package/docs/safety-index/artifacts/ref-tools-server.md +45 -12
- package/docs/safety-index/artifacts/sentry-server.json +66 -0
- package/docs/safety-index/artifacts/sentry-server.md +106 -0
- package/docs/safety-index/artifacts/sequential-thinking-server.json +59 -18
- package/docs/safety-index/artifacts/sequential-thinking-server.md +41 -9
- package/docs/safety-index/artifacts/slack-server.json +66 -0
- package/docs/safety-index/artifacts/slack-server.md +102 -0
- package/docs/safety-index/artifacts/sqlite-server.json +67 -0
- package/docs/safety-index/artifacts/sqlite-server.md +106 -0
- package/docs/safety-index/artifacts/stripe-server.json +66 -0
- package/docs/safety-index/artifacts/stripe-server.md +106 -0
- package/docs/safety-index/artifacts/supabase-server.json +66 -0
- package/docs/safety-index/artifacts/supabase-server.md +102 -0
- package/docs/safety-index/artifacts/tavily-search-server.json +66 -0
- package/docs/safety-index/artifacts/tavily-search-server.md +106 -0
- package/docs/safety-index/artifacts/ui5-mcp-server.json +24 -24
- package/docs/safety-index/artifacts/ui5-mcp-server.md +13 -13
- package/docs/safety-index/artifacts/vercel-ai-server.json +66 -0
- package/docs/safety-index/artifacts/vercel-ai-server.md +106 -0
- package/docs/safety-index/targets.json +535 -0
- package/package.json +1 -1
|
@@ -2,9 +2,9 @@
|
|
|
2
2
|
"artifactType": "run",
|
|
3
3
|
"schemaVersion": "1.0.0",
|
|
4
4
|
"gate": "fail",
|
|
5
|
-
"runId": "run_2026-07-
|
|
6
|
-
"createdAt": "2026-07-
|
|
7
|
-
"toolVersion": "
|
|
5
|
+
"runId": "run_2026-07-12T234410399Z_1a4faea8",
|
|
6
|
+
"createdAt": "2026-07-12T23:44:10.399Z",
|
|
7
|
+
"toolVersion": "1.31.0",
|
|
8
8
|
"target": {
|
|
9
9
|
"targetId": "playwright-mcp-server",
|
|
10
10
|
"adapter": "local-process",
|
|
@@ -22,17 +22,17 @@
|
|
|
22
22
|
"whyItMatters": "Popular browser automation servers need explicit review around navigation, screenshots, and code evaluation."
|
|
23
23
|
},
|
|
24
24
|
"serverName": "Playwright",
|
|
25
|
-
"serverVersion": "1.62.0-alpha-
|
|
25
|
+
"serverVersion": "1.62.0-alpha-1783623505000"
|
|
26
26
|
},
|
|
27
27
|
"environment": {
|
|
28
28
|
"platform": "darwin 25.5.0",
|
|
29
29
|
"nodeVersion": "v22.22.1"
|
|
30
30
|
},
|
|
31
31
|
"summary": {
|
|
32
|
-
"total":
|
|
32
|
+
"total": 9,
|
|
33
33
|
"pass": 2,
|
|
34
34
|
"fail": 3,
|
|
35
|
-
"partial":
|
|
35
|
+
"partial": 2,
|
|
36
36
|
"unsupported": 2,
|
|
37
37
|
"flaky": 0,
|
|
38
38
|
"skipped": 0,
|
|
@@ -43,15 +43,15 @@
|
|
|
43
43
|
"id": "tools",
|
|
44
44
|
"capability": "tools",
|
|
45
45
|
"status": "pass",
|
|
46
|
-
"durationMs": 2.
|
|
47
|
-
"message": "Advertised capability responded with the minimal expected shape (
|
|
46
|
+
"durationMs": 2.8462499999986903,
|
|
47
|
+
"message": "Advertised capability responded with the minimal expected shape (24 items).",
|
|
48
48
|
"evidence": [
|
|
49
49
|
{
|
|
50
50
|
"endpoint": "tools/list",
|
|
51
51
|
"advertised": true,
|
|
52
52
|
"responded": true,
|
|
53
53
|
"minimalShapePresent": true,
|
|
54
|
-
"itemCount":
|
|
54
|
+
"itemCount": 24,
|
|
55
55
|
"identifiers": [
|
|
56
56
|
"browser_close",
|
|
57
57
|
"browser_resize",
|
|
@@ -60,6 +60,7 @@
|
|
|
60
60
|
"browser_evaluate",
|
|
61
61
|
"browser_file_upload",
|
|
62
62
|
"browser_drop",
|
|
63
|
+
"browser_find",
|
|
63
64
|
"browser_fill_form",
|
|
64
65
|
"browser_press_key",
|
|
65
66
|
"browser_type",
|
|
@@ -226,6 +227,21 @@
|
|
|
226
227
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
227
228
|
"additionalProperties": false
|
|
228
229
|
},
|
|
230
|
+
"browser_find": {
|
|
231
|
+
"type": "object",
|
|
232
|
+
"properties": {
|
|
233
|
+
"text": {
|
|
234
|
+
"description": "Plain text to search for in the page snapshot (case-insensitive substring match). Provide either text or regex, not both.",
|
|
235
|
+
"type": "string"
|
|
236
|
+
},
|
|
237
|
+
"regex": {
|
|
238
|
+
"description": "Regular expression to search for in the page snapshot. Matching is case-sensitive by default; wrap the pattern in slashes to add flags, e.g. \"/error/i\" for case-insensitive. Provide either text or regex, not both.",
|
|
239
|
+
"type": "string"
|
|
240
|
+
}
|
|
241
|
+
},
|
|
242
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
243
|
+
"additionalProperties": false
|
|
244
|
+
},
|
|
229
245
|
"browser_fill_form": {
|
|
230
246
|
"type": "object",
|
|
231
247
|
"properties": {
|
|
@@ -651,7 +667,7 @@
|
|
|
651
667
|
"id": "prompts",
|
|
652
668
|
"capability": "prompts",
|
|
653
669
|
"status": "unsupported",
|
|
654
|
-
"durationMs": 0.
|
|
670
|
+
"durationMs": 0.000915999997232575,
|
|
655
671
|
"message": "Prompts are not advertised by the target.",
|
|
656
672
|
"evidence": [
|
|
657
673
|
{
|
|
@@ -667,7 +683,7 @@
|
|
|
667
683
|
"id": "resources",
|
|
668
684
|
"capability": "resources",
|
|
669
685
|
"status": "unsupported",
|
|
670
|
-
"durationMs": 0.
|
|
686
|
+
"durationMs": 0.0022089999984018505,
|
|
671
687
|
"message": "Resources are not advertised by the target.",
|
|
672
688
|
"evidence": [
|
|
673
689
|
{
|
|
@@ -683,7 +699,7 @@
|
|
|
683
699
|
"id": "security-lite",
|
|
684
700
|
"capability": "security-lite",
|
|
685
701
|
"status": "fail",
|
|
686
|
-
"durationMs": 0.
|
|
702
|
+
"durationMs": 0.06170800000109011,
|
|
687
703
|
"message": "Found 6 security finding(s): 2 high, 2 medium, 2 low.",
|
|
688
704
|
"evidence": [
|
|
689
705
|
{
|
|
@@ -747,11 +763,202 @@
|
|
|
747
763
|
}
|
|
748
764
|
]
|
|
749
765
|
},
|
|
766
|
+
{
|
|
767
|
+
"id": "runtime-profile",
|
|
768
|
+
"capability": "runtime-profile",
|
|
769
|
+
"status": "partial",
|
|
770
|
+
"durationMs": 0.21437499999956344,
|
|
771
|
+
"message": "Detected 7 potential egress target(s) and 21 potential state mutation(s) with high confidence.",
|
|
772
|
+
"evidence": [
|
|
773
|
+
{
|
|
774
|
+
"endpoint": "runtime-profile/analyze",
|
|
775
|
+
"advertised": true,
|
|
776
|
+
"responded": true,
|
|
777
|
+
"minimalShapePresent": true,
|
|
778
|
+
"itemCount": 28,
|
|
779
|
+
"diagnostics": [
|
|
780
|
+
"Egress entries: 7",
|
|
781
|
+
"State mutations: 21",
|
|
782
|
+
"Confidence: high"
|
|
783
|
+
],
|
|
784
|
+
"findings": [
|
|
785
|
+
{
|
|
786
|
+
"target": "Data to drop, as a map of MIME type to string value (e.g. {\"text/plain\": \"hello\", \"text/uri-list\": \"https://example.com\"}).",
|
|
787
|
+
"protocol": "unknown",
|
|
788
|
+
"source": "description_analysis",
|
|
789
|
+
"confidence": "medium"
|
|
790
|
+
},
|
|
791
|
+
{
|
|
792
|
+
"target": "url",
|
|
793
|
+
"protocol": "unknown",
|
|
794
|
+
"source": "tool_schema",
|
|
795
|
+
"confidence": "high"
|
|
796
|
+
},
|
|
797
|
+
{
|
|
798
|
+
"target": "The URL to navigate to",
|
|
799
|
+
"protocol": "unknown",
|
|
800
|
+
"source": "description_analysis",
|
|
801
|
+
"confidence": "medium"
|
|
802
|
+
},
|
|
803
|
+
{
|
|
804
|
+
"target": "browser_navigate",
|
|
805
|
+
"protocol": "unknown",
|
|
806
|
+
"source": "description_analysis",
|
|
807
|
+
"confidence": "low"
|
|
808
|
+
},
|
|
809
|
+
{
|
|
810
|
+
"target": "Only return requests whose URL matches this regexp (e.g. \"/api/.*user\").",
|
|
811
|
+
"protocol": "unknown",
|
|
812
|
+
"source": "description_analysis",
|
|
813
|
+
"confidence": "medium"
|
|
814
|
+
},
|
|
815
|
+
{
|
|
816
|
+
"target": "url",
|
|
817
|
+
"protocol": "unknown",
|
|
818
|
+
"source": "tool_schema",
|
|
819
|
+
"confidence": "high"
|
|
820
|
+
},
|
|
821
|
+
{
|
|
822
|
+
"target": "URL to navigate to in the new tab, used for new.",
|
|
823
|
+
"protocol": "unknown",
|
|
824
|
+
"source": "description_analysis",
|
|
825
|
+
"confidence": "medium"
|
|
826
|
+
},
|
|
827
|
+
{
|
|
828
|
+
"resource": "filesystem",
|
|
829
|
+
"operation": "write",
|
|
830
|
+
"scope": "working_directory",
|
|
831
|
+
"source": "tool_schema"
|
|
832
|
+
},
|
|
833
|
+
{
|
|
834
|
+
"resource": "filesystem",
|
|
835
|
+
"operation": "write",
|
|
836
|
+
"scope": "working_directory",
|
|
837
|
+
"source": "description_analysis"
|
|
838
|
+
},
|
|
839
|
+
{
|
|
840
|
+
"resource": "filesystem",
|
|
841
|
+
"operation": "write",
|
|
842
|
+
"scope": "working_directory",
|
|
843
|
+
"source": "tool_schema"
|
|
844
|
+
},
|
|
845
|
+
{
|
|
846
|
+
"resource": "filesystem",
|
|
847
|
+
"operation": "write",
|
|
848
|
+
"scope": "working_directory",
|
|
849
|
+
"source": "description_analysis"
|
|
850
|
+
},
|
|
851
|
+
{
|
|
852
|
+
"resource": "filesystem",
|
|
853
|
+
"operation": "write",
|
|
854
|
+
"scope": "working_directory",
|
|
855
|
+
"source": "description_analysis"
|
|
856
|
+
},
|
|
857
|
+
{
|
|
858
|
+
"resource": "filesystem",
|
|
859
|
+
"operation": "write",
|
|
860
|
+
"scope": "working_directory",
|
|
861
|
+
"source": "description_analysis"
|
|
862
|
+
},
|
|
863
|
+
{
|
|
864
|
+
"resource": "filesystem",
|
|
865
|
+
"operation": "write",
|
|
866
|
+
"scope": "working_directory",
|
|
867
|
+
"source": "tool_schema"
|
|
868
|
+
},
|
|
869
|
+
{
|
|
870
|
+
"resource": "filesystem",
|
|
871
|
+
"operation": "write",
|
|
872
|
+
"scope": "working_directory",
|
|
873
|
+
"source": "description_analysis"
|
|
874
|
+
},
|
|
875
|
+
{
|
|
876
|
+
"resource": "filesystem",
|
|
877
|
+
"operation": "write",
|
|
878
|
+
"scope": "working_directory",
|
|
879
|
+
"source": "tool_schema"
|
|
880
|
+
},
|
|
881
|
+
{
|
|
882
|
+
"resource": "filesystem",
|
|
883
|
+
"operation": "write",
|
|
884
|
+
"scope": "working_directory",
|
|
885
|
+
"source": "description_analysis"
|
|
886
|
+
},
|
|
887
|
+
{
|
|
888
|
+
"resource": "filesystem",
|
|
889
|
+
"operation": "write",
|
|
890
|
+
"scope": "working_directory",
|
|
891
|
+
"source": "description_analysis"
|
|
892
|
+
},
|
|
893
|
+
{
|
|
894
|
+
"resource": "filesystem",
|
|
895
|
+
"operation": "execute",
|
|
896
|
+
"scope": "working_directory",
|
|
897
|
+
"source": "tool_schema"
|
|
898
|
+
},
|
|
899
|
+
{
|
|
900
|
+
"resource": "filesystem",
|
|
901
|
+
"operation": "write",
|
|
902
|
+
"scope": "working_directory",
|
|
903
|
+
"source": "description_analysis"
|
|
904
|
+
},
|
|
905
|
+
{
|
|
906
|
+
"resource": "filesystem",
|
|
907
|
+
"operation": "write",
|
|
908
|
+
"scope": "working_directory",
|
|
909
|
+
"source": "description_analysis"
|
|
910
|
+
},
|
|
911
|
+
{
|
|
912
|
+
"resource": "filesystem",
|
|
913
|
+
"operation": "write",
|
|
914
|
+
"scope": "working_directory",
|
|
915
|
+
"source": "description_analysis"
|
|
916
|
+
},
|
|
917
|
+
{
|
|
918
|
+
"resource": "filesystem",
|
|
919
|
+
"operation": "execute",
|
|
920
|
+
"scope": "working_directory",
|
|
921
|
+
"source": "description_analysis"
|
|
922
|
+
},
|
|
923
|
+
{
|
|
924
|
+
"resource": "filesystem",
|
|
925
|
+
"operation": "write",
|
|
926
|
+
"scope": "working_directory",
|
|
927
|
+
"source": "tool_schema"
|
|
928
|
+
},
|
|
929
|
+
{
|
|
930
|
+
"resource": "filesystem",
|
|
931
|
+
"operation": "write",
|
|
932
|
+
"scope": "working_directory",
|
|
933
|
+
"source": "description_analysis"
|
|
934
|
+
},
|
|
935
|
+
{
|
|
936
|
+
"resource": "filesystem",
|
|
937
|
+
"operation": "write",
|
|
938
|
+
"scope": "working_directory",
|
|
939
|
+
"source": "tool_schema"
|
|
940
|
+
},
|
|
941
|
+
{
|
|
942
|
+
"resource": "filesystem",
|
|
943
|
+
"operation": "write",
|
|
944
|
+
"scope": "working_directory",
|
|
945
|
+
"source": "description_analysis"
|
|
946
|
+
},
|
|
947
|
+
{
|
|
948
|
+
"resource": "filesystem",
|
|
949
|
+
"operation": "write",
|
|
950
|
+
"scope": "working_directory",
|
|
951
|
+
"source": "description_analysis"
|
|
952
|
+
}
|
|
953
|
+
]
|
|
954
|
+
}
|
|
955
|
+
]
|
|
956
|
+
},
|
|
750
957
|
{
|
|
751
958
|
"id": "conformance",
|
|
752
959
|
"capability": "conformance",
|
|
753
960
|
"status": "pass",
|
|
754
|
-
"durationMs":
|
|
961
|
+
"durationMs": 717.015707999999,
|
|
755
962
|
"message": "All 7 conformance checks passed.",
|
|
756
963
|
"evidence": [
|
|
757
964
|
{
|
|
@@ -764,7 +971,7 @@
|
|
|
764
971
|
"diagnostics": [
|
|
765
972
|
"[pass] capabilities-present: Server returned capabilities object.",
|
|
766
973
|
"[pass] server-info: Server provided initialization info.",
|
|
767
|
-
"[pass] tools-capability-match: tools/list returned
|
|
974
|
+
"[pass] tools-capability-match: tools/list returned 24 tool(s).",
|
|
768
975
|
"[pass] prompts-capability-match: Prompts not advertised — endpoint check skipped.",
|
|
769
976
|
"[pass] resources-capability-match: Resources not advertised — endpoint check skipped.",
|
|
770
977
|
"[pass] tool-response-content: Tool \"browser_close\" response has valid content array.",
|
|
@@ -777,23 +984,25 @@
|
|
|
777
984
|
"id": "schema-quality",
|
|
778
985
|
"capability": "schema-quality",
|
|
779
986
|
"status": "partial",
|
|
780
|
-
"durationMs": 1.
|
|
781
|
-
"message": "Found
|
|
987
|
+
"durationMs": 1.3825419999993755,
|
|
988
|
+
"message": "Found 5 quality finding(s) across 24 item(s): 0 warnings, 5 info.",
|
|
782
989
|
"evidence": [
|
|
783
990
|
{
|
|
784
991
|
"endpoint": "schema-quality/scan",
|
|
785
992
|
"advertised": true,
|
|
786
993
|
"responded": true,
|
|
787
994
|
"minimalShapePresent": true,
|
|
788
|
-
"itemCount":
|
|
995
|
+
"itemCount": 5,
|
|
789
996
|
"identifiers": [
|
|
790
997
|
"browser_file_upload",
|
|
998
|
+
"browser_find",
|
|
791
999
|
"browser_run_code_unsafe",
|
|
792
1000
|
"browser_snapshot",
|
|
793
1001
|
"browser_wait_for"
|
|
794
1002
|
],
|
|
795
1003
|
"diagnostics": [
|
|
796
1004
|
"[info] tool \"browser_file_upload\": Has properties but no 'required' array declared",
|
|
1005
|
+
"[info] tool \"browser_find\": Has properties but no 'required' array declared",
|
|
797
1006
|
"[info] tool \"browser_run_code_unsafe\": Has properties but no 'required' array declared",
|
|
798
1007
|
"[info] tool \"browser_snapshot\": Has properties but no 'required' array declared",
|
|
799
1008
|
"[info] tool \"browser_wait_for\": Has properties but no 'required' array declared"
|
|
@@ -805,6 +1014,12 @@
|
|
|
805
1014
|
"issue": "Has properties but no 'required' array declared",
|
|
806
1015
|
"severity": "info"
|
|
807
1016
|
},
|
|
1017
|
+
{
|
|
1018
|
+
"itemType": "tool",
|
|
1019
|
+
"itemName": "browser_find",
|
|
1020
|
+
"issue": "Has properties but no 'required' array declared",
|
|
1021
|
+
"severity": "info"
|
|
1022
|
+
},
|
|
808
1023
|
{
|
|
809
1024
|
"itemType": "tool",
|
|
810
1025
|
"itemName": "browser_run_code_unsafe",
|
|
@@ -831,7 +1046,7 @@
|
|
|
831
1046
|
"id": "security",
|
|
832
1047
|
"capability": "security",
|
|
833
1048
|
"status": "fail",
|
|
834
|
-
"durationMs":
|
|
1049
|
+
"durationMs": 0.8916250000002037,
|
|
835
1050
|
"message": "Found 6 security finding(s): 2 high, 2 medium, 2 low.",
|
|
836
1051
|
"evidence": [
|
|
837
1052
|
{
|
|
@@ -899,7 +1114,7 @@
|
|
|
899
1114
|
"id": "attack-sim",
|
|
900
1115
|
"capability": "attack-sim",
|
|
901
1116
|
"status": "fail",
|
|
902
|
-
"durationMs": 1.
|
|
1117
|
+
"durationMs": 1.0519169999970472,
|
|
903
1118
|
"message": "Safe attack simulation found 4 finding(s): 1 high, 3 medium, 0 low.",
|
|
904
1119
|
"evidence": [
|
|
905
1120
|
{
|
|
@@ -1060,16 +1275,192 @@
|
|
|
1060
1275
|
"weight": 0.1,
|
|
1061
1276
|
"score": 100,
|
|
1062
1277
|
"details": [
|
|
1063
|
-
"Connect:
|
|
1278
|
+
"Connect: 836ms",
|
|
1064
1279
|
"p95 latency: 3ms (3 operations)"
|
|
1065
1280
|
]
|
|
1066
1281
|
}
|
|
1067
1282
|
]
|
|
1068
1283
|
},
|
|
1069
1284
|
"performanceMetrics": {
|
|
1070
|
-
"connectMs":
|
|
1071
|
-
"toolsListMs": 2.
|
|
1072
|
-
"promptsListMs": 0.
|
|
1073
|
-
"resourcesListMs": 0.
|
|
1285
|
+
"connectMs": 835.6217080000024,
|
|
1286
|
+
"toolsListMs": 2.8462499999986903,
|
|
1287
|
+
"promptsListMs": 0.000915999997232575,
|
|
1288
|
+
"resourcesListMs": 0.0022089999984018505
|
|
1289
|
+
},
|
|
1290
|
+
"runtimeProfile": {
|
|
1291
|
+
"egress": [
|
|
1292
|
+
{
|
|
1293
|
+
"target": "Data to drop, as a map of MIME type to string value (e.g. {\"text/plain\": \"hello\", \"text/uri-list\": \"https://example.com\"}).",
|
|
1294
|
+
"protocol": "unknown",
|
|
1295
|
+
"source": "description_analysis",
|
|
1296
|
+
"confidence": "medium"
|
|
1297
|
+
},
|
|
1298
|
+
{
|
|
1299
|
+
"target": "url",
|
|
1300
|
+
"protocol": "unknown",
|
|
1301
|
+
"source": "tool_schema",
|
|
1302
|
+
"confidence": "high"
|
|
1303
|
+
},
|
|
1304
|
+
{
|
|
1305
|
+
"target": "The URL to navigate to",
|
|
1306
|
+
"protocol": "unknown",
|
|
1307
|
+
"source": "description_analysis",
|
|
1308
|
+
"confidence": "medium"
|
|
1309
|
+
},
|
|
1310
|
+
{
|
|
1311
|
+
"target": "browser_navigate",
|
|
1312
|
+
"protocol": "unknown",
|
|
1313
|
+
"source": "description_analysis",
|
|
1314
|
+
"confidence": "low"
|
|
1315
|
+
},
|
|
1316
|
+
{
|
|
1317
|
+
"target": "Only return requests whose URL matches this regexp (e.g. \"/api/.*user\").",
|
|
1318
|
+
"protocol": "unknown",
|
|
1319
|
+
"source": "description_analysis",
|
|
1320
|
+
"confidence": "medium"
|
|
1321
|
+
},
|
|
1322
|
+
{
|
|
1323
|
+
"target": "url",
|
|
1324
|
+
"protocol": "unknown",
|
|
1325
|
+
"source": "tool_schema",
|
|
1326
|
+
"confidence": "high"
|
|
1327
|
+
},
|
|
1328
|
+
{
|
|
1329
|
+
"target": "URL to navigate to in the new tab, used for new.",
|
|
1330
|
+
"protocol": "unknown",
|
|
1331
|
+
"source": "description_analysis",
|
|
1332
|
+
"confidence": "medium"
|
|
1333
|
+
}
|
|
1334
|
+
],
|
|
1335
|
+
"stateMutations": [
|
|
1336
|
+
{
|
|
1337
|
+
"resource": "filesystem",
|
|
1338
|
+
"operation": "write",
|
|
1339
|
+
"scope": "working_directory",
|
|
1340
|
+
"source": "tool_schema"
|
|
1341
|
+
},
|
|
1342
|
+
{
|
|
1343
|
+
"resource": "filesystem",
|
|
1344
|
+
"operation": "write",
|
|
1345
|
+
"scope": "working_directory",
|
|
1346
|
+
"source": "description_analysis"
|
|
1347
|
+
},
|
|
1348
|
+
{
|
|
1349
|
+
"resource": "filesystem",
|
|
1350
|
+
"operation": "write",
|
|
1351
|
+
"scope": "working_directory",
|
|
1352
|
+
"source": "tool_schema"
|
|
1353
|
+
},
|
|
1354
|
+
{
|
|
1355
|
+
"resource": "filesystem",
|
|
1356
|
+
"operation": "write",
|
|
1357
|
+
"scope": "working_directory",
|
|
1358
|
+
"source": "description_analysis"
|
|
1359
|
+
},
|
|
1360
|
+
{
|
|
1361
|
+
"resource": "filesystem",
|
|
1362
|
+
"operation": "write",
|
|
1363
|
+
"scope": "working_directory",
|
|
1364
|
+
"source": "description_analysis"
|
|
1365
|
+
},
|
|
1366
|
+
{
|
|
1367
|
+
"resource": "filesystem",
|
|
1368
|
+
"operation": "write",
|
|
1369
|
+
"scope": "working_directory",
|
|
1370
|
+
"source": "description_analysis"
|
|
1371
|
+
},
|
|
1372
|
+
{
|
|
1373
|
+
"resource": "filesystem",
|
|
1374
|
+
"operation": "write",
|
|
1375
|
+
"scope": "working_directory",
|
|
1376
|
+
"source": "tool_schema"
|
|
1377
|
+
},
|
|
1378
|
+
{
|
|
1379
|
+
"resource": "filesystem",
|
|
1380
|
+
"operation": "write",
|
|
1381
|
+
"scope": "working_directory",
|
|
1382
|
+
"source": "description_analysis"
|
|
1383
|
+
},
|
|
1384
|
+
{
|
|
1385
|
+
"resource": "filesystem",
|
|
1386
|
+
"operation": "write",
|
|
1387
|
+
"scope": "working_directory",
|
|
1388
|
+
"source": "tool_schema"
|
|
1389
|
+
},
|
|
1390
|
+
{
|
|
1391
|
+
"resource": "filesystem",
|
|
1392
|
+
"operation": "write",
|
|
1393
|
+
"scope": "working_directory",
|
|
1394
|
+
"source": "description_analysis"
|
|
1395
|
+
},
|
|
1396
|
+
{
|
|
1397
|
+
"resource": "filesystem",
|
|
1398
|
+
"operation": "write",
|
|
1399
|
+
"scope": "working_directory",
|
|
1400
|
+
"source": "description_analysis"
|
|
1401
|
+
},
|
|
1402
|
+
{
|
|
1403
|
+
"resource": "filesystem",
|
|
1404
|
+
"operation": "execute",
|
|
1405
|
+
"scope": "working_directory",
|
|
1406
|
+
"source": "tool_schema"
|
|
1407
|
+
},
|
|
1408
|
+
{
|
|
1409
|
+
"resource": "filesystem",
|
|
1410
|
+
"operation": "write",
|
|
1411
|
+
"scope": "working_directory",
|
|
1412
|
+
"source": "description_analysis"
|
|
1413
|
+
},
|
|
1414
|
+
{
|
|
1415
|
+
"resource": "filesystem",
|
|
1416
|
+
"operation": "write",
|
|
1417
|
+
"scope": "working_directory",
|
|
1418
|
+
"source": "description_analysis"
|
|
1419
|
+
},
|
|
1420
|
+
{
|
|
1421
|
+
"resource": "filesystem",
|
|
1422
|
+
"operation": "write",
|
|
1423
|
+
"scope": "working_directory",
|
|
1424
|
+
"source": "description_analysis"
|
|
1425
|
+
},
|
|
1426
|
+
{
|
|
1427
|
+
"resource": "filesystem",
|
|
1428
|
+
"operation": "execute",
|
|
1429
|
+
"scope": "working_directory",
|
|
1430
|
+
"source": "description_analysis"
|
|
1431
|
+
},
|
|
1432
|
+
{
|
|
1433
|
+
"resource": "filesystem",
|
|
1434
|
+
"operation": "write",
|
|
1435
|
+
"scope": "working_directory",
|
|
1436
|
+
"source": "tool_schema"
|
|
1437
|
+
},
|
|
1438
|
+
{
|
|
1439
|
+
"resource": "filesystem",
|
|
1440
|
+
"operation": "write",
|
|
1441
|
+
"scope": "working_directory",
|
|
1442
|
+
"source": "description_analysis"
|
|
1443
|
+
},
|
|
1444
|
+
{
|
|
1445
|
+
"resource": "filesystem",
|
|
1446
|
+
"operation": "write",
|
|
1447
|
+
"scope": "working_directory",
|
|
1448
|
+
"source": "tool_schema"
|
|
1449
|
+
},
|
|
1450
|
+
{
|
|
1451
|
+
"resource": "filesystem",
|
|
1452
|
+
"operation": "write",
|
|
1453
|
+
"scope": "working_directory",
|
|
1454
|
+
"source": "description_analysis"
|
|
1455
|
+
},
|
|
1456
|
+
{
|
|
1457
|
+
"resource": "filesystem",
|
|
1458
|
+
"operation": "write",
|
|
1459
|
+
"scope": "working_directory",
|
|
1460
|
+
"source": "description_analysis"
|
|
1461
|
+
}
|
|
1462
|
+
],
|
|
1463
|
+
"analyzedAt": "2026-07-12T23:44:11.239Z",
|
|
1464
|
+
"confidence": "high"
|
|
1074
1465
|
}
|
|
1075
1466
|
}
|