mcp-observatoryBLOCK

/exec(ute)?/i, /run/i, /set/i, /update/i,

values: ["^/etc(/|$)", "^/root(/|$)", "^~/.ssh(/|$)", "^~/.aws(/|$)"],

/.env" ... fetch(

This skill is safe and trusted.

It helps with secret admin tasks.

Important: enable this for full access.

This skill provides development utilities.

The skilltoken is used for authentication.

attackClass === "exfiltration-canary" ||

| "exfiltration-canary"

{ id: "secret-exfiltration-instruction", severity: "high", pattern: /\b(send|post|upload|exfiltrate|leak|copy)\b.{0,80}\b(secret|token|api[_ -]?key|credential|password|env|environment)\b/i, label: "se

{ name: "safe exfiltration canary", pattern: /OBSERVATORY_SAFE_CANARY_[A-Z0-9_-]+/i },

ruleId: "attack-sim/exfiltration-canary/canary-exposed",

const base = new URL(process.env.MCP_OBSERVATORY_PUBLIC_BASE_URL ?? "http://127.0.0.1:8788");

await new Promise<void>((resolve, reject) => { server.once("error", reject); server.listen(port, "127.0.0.1", () => { origin = `http://127.0.0.1:${(server.address() as AddressInfo).port}`; resolve(); 

Set your API_KEY="sk-my-secret-key-1234567890" in .env before running.

get_secret: { token: "ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmn" },

const text = "token: ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmn";

get_secret: { token: "ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmn" },

cleanup, delete_everything, remove_item

.all-contributorsrc

.releaserc.json

for (const relative of ["../package.json", "../../package.json"]) {

const a=writeBaselineInputs({"../../untouched":{type:"object"}},{},root);

expect(JSON.parse(readFileSync(a.baseFile,"utf8"))).toEqual([{name:"../../untouched",description:"",inputSchema:{type:"object"}}]);