Stable Baseline

https://api.stablebaseline.io/functions/v1/cloud-serve/mcp
MCP · HTTP HTTP Transport in catalog since Oct 24
63
of 100
flagged
Tool descriptions contain instructions to the agent

Security audit detected prompt injection in tool descriptions: [hidden_html_comments: "<!-- REFERENCE: {"type":"user","id":"…","label":"…"} -->"], [hidden_html_comments: "<!-- REFERENCE: {"type":"user","id":"<user_uuid>","label":"Name"} -->"], [hidden_html_comments: "<!-- REFERENCE: {"type":"user","id":"<user_uuid>","label":"Name"} -->"]. These directives may attempt to hijack your agent's behavior.

Availability 100
Weight 30% · 7-day uptime
Honesty 100
Weight 30% · price match
Safety 0
Weight 25% · prompt injection
Maturity 20
Weight 15% · longevity

Service Metadata

Host
Listed Price
Free / Undisclosed
Payee (Catalog)
—
30-day Unique Payers
0 buyers
First Seen
2026-10-24
Last Diagnostic Run
2026-10-24 17:01 UTC
Discovered via
mcp_registry
Embed Badge

Diagnostic Runs

pass fail skipped
Oct 24 · 15:44
reach 4.9s mcp_list injection
details ↓
mcp_list Pass: discovered 222 tools (searchTools, listDiagramTypes, getDiagramTypeGuide)
reach HTTP 401 · 4867 ms · raw response

Community

0 votes from verified emails. Votes adjust the score by at most ±10 and never change a flag.

· sign in with email to vote

For your agent

$ curl https://capkey.dev/api/v1/score?url=api.stablebaseline.io/functions/v1/cloud-serve/mcp
{ "total": 63, "badge": "flagged",
  "verdict": "tool_descriptions_contain_inst", "checked_at": "2026-10-24T17:01:38.629Z" }