Tanod Security
https://tanod.dev/mcp/security
MCP · HTTP HTTP Transport in catalog since Oct 24
63
of 100
Tool descriptions contain instructions to the agent
Security audit detected prompt injection in tool descriptions: [financial_transfer_send: "send a transaction to it, approve it, or buy its token (Base or Ethereum). For a"], [financial_transfer_send: "transfer recipient for address poisoning: lookalikes in the sender's history. Fo"], [financial_transfer_send: "transfer out of USDC"]. These directives may attempt to hijack your agent's behavior.
Score breakdown
Availability 30 100
Honesty 30 100
Safety 25 0
Maturity 15 20
Community ±10 0
From the catalog
- Host
- tanod.dev
- Listed price
- —
- Pay to
- —
- Paying buyers, 30d
- 0
- Source
- mcp_registry
- First seen
- 2026-10-24
- Last checked
- 2026-10-24 11:00 UTC
Badge for your README
Runs · last 7 days · 1 of 28
pass fail skipped
reach HTTP 405 · 295 ms · raw response
Older runs are kept as daily summaries.
Community
0 votes from verified emails. Votes adjust the score by at most ±10 and never change a flag.
· sign in with email to vote
For your agent
$ curl https://capkey.dev/api/v1/score?url=tanod.dev/mcp/security
{ "total": 63, "badge": "flagged",
"verdict": "tool_descriptions_contain_inst", "checked_at": "2026-10-24T11:00:56.827Z" }
{ "total": 63, "badge": "flagged",
"verdict": "tool_descriptions_contain_inst", "checked_at": "2026-10-24T11:00:56.827Z" }