14 events matching critical + flag|clear
Flag critical
@mindstone-engineering/mcp-server-fathom 12d ago

Security flag added: Declared package '@mindstone-engineering/mcp-server-fathom' matches no manifest in the repo

Flag critical
@mindstone-engineering/mcp-server-fathom 12d ago

Security flag added: Hardcoded OAuth client secret in mindstone-mcp-servers-662af86/connectors/vanta/test/untrusted-content.test.ts

Flag critical
@mindstone-engineering/mcp-server-fathom 12d ago

Security flag added: High-risk OAuth scope: https://www.googleapis.com/auth/drive

Flag critical
@mindstone-engineering/mcp-server-fathom 12d ago

Security flag added: Permission: shell access detected

Flag critical
@mindstone-engineering/mcp-server-fathom 12d ago

Security flag added: Invisible Unicode characters in 'send_document'

Flag critical
@mindstone-engineering/mcp-server-fathom 12d ago

Security flag added: Tool poisoning in 'create_dubbing': Directive language: 'you must'

Flag critical
@mindstone-engineering/mcp-server-fathom 12d ago

Security flag added: Tool poisoning in 'get_dubbing': Cross-tool sequencing directive

Flag critical
@mindstone-engineering/mcp-server-office 18d ago

Security flag added: Hardcoded OAuth client secret in mindstone-mcp-servers-662af86/connectors/servicenow/test/oauth.test.ts

Flag critical
@mindstone-engineering/mcp-server-office 18d ago

Security flag added: High-risk OAuth scope: https://www.googleapis.com/auth/drive

Flag critical
@mindstone-engineering/mcp-server-office 18d ago

Security flag added: Permission: shell access detected

Flag critical
@mindstone-engineering/mcp-server-office 18d ago

Security flag added: Tool poisoning in 'create_session': Secrecy directive

Flag critical
@mindstone-engineering/mcp-server-office 18d ago

Security flag added: Tool poisoning in 'browser_snapshot': Cross-tool sequencing directive

Flag critical
@mindstone-engineering/mcp-server-office 18d ago

Security flag added: Invisible Unicode characters in 'send_document'

Flag critical
@mindstone-engineering/mcp-server-office 18d ago

Security flag added: Declared package '@mindstone-engineering/mcp-server-office' matches no manifest in the repo