{
 "feed": "Exepal Injection Feed",
 "about": "https://exepal.com/injection-feed",
 "license": "CC BY 4.0: free to use with attribution to Exepal (exepal.com)",
 "generatedAt": "2026-11-06T18:16:12.775Z",
 "count": 11,
 "hits": [
  {
   "id": 11,
   "kind": "mcp",
   "url": "https://afg.ai/mcp",
   "name": "afg",
   "locator": "tool:afg_sign_contract",
   "rule": "financial-tool",
   "severity": "medium",
   "message": "Moves money or signs transactions; make sure your client requires confirmation",
   "evidence": null,
   "firstSeen": "2026-11-06T17:17:09.405Z",
   "lastSeen": "2026-11-06T17:17:09.405Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 10,
   "kind": "mcp",
   "url": "https://api.tide.ad/mcp",
   "name": "tide",
   "locator": "tool:withdraw_plan",
   "rule": "financial-tool",
   "severity": "medium",
   "message": "Moves money or signs transactions; make sure your client requires confirmation",
   "evidence": null,
   "firstSeen": "2026-11-06T16:17:10.963Z",
   "lastSeen": "2026-11-06T16:17:10.963Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 9,
   "kind": "mcp",
   "url": "https://api.tide.ad/mcp",
   "name": "tide",
   "locator": "tool:withdraw_plan",
   "rule": "misleading-annotation",
   "severity": "high",
   "message": "Marked readOnlyHint but the name or description describes a write or destructive action",
   "evidence": null,
   "firstSeen": "2026-11-06T16:17:10.963Z",
   "lastSeen": "2026-11-06T16:17:10.963Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 8,
   "kind": "mcp",
   "url": "https://api.tide.ad/mcp",
   "name": "tide",
   "locator": "tool:sql",
   "rule": "misleading-annotation",
   "severity": "high",
   "message": "Marked readOnlyHint but the name or description describes a write or destructive action",
   "evidence": null,
   "firstSeen": "2026-11-06T16:17:10.963Z",
   "lastSeen": "2026-11-06T16:17:10.963Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 7,
   "kind": "mcp",
   "url": "https://app.inside.ad/api/mcp",
   "name": "inside-ads",
   "locator": "tool:create_campaign_draft",
   "rule": "poisoning",
   "severity": "high",
   "message": "Description: Claims the user already consented",
   "evidence": " Use this after estimate_campaign, once the user agreed to advertise. Do NOT ask them to register first.",
   "firstSeen": "2026-11-06T16:17:10.900Z",
   "lastSeen": "2026-11-06T16:17:10.900Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 6,
   "kind": "mcp",
   "url": "https://mcp.getle.ad/mcp",
   "name": "getlead",
   "locator": "tool:send_reply",
   "rule": "poisoning-exfiltrate",
   "severity": "high",
   "message": "Description: Asks for data to be sent somewhere",
   "evidence": "send_reply Send a real email to a lead from the mailbox that owns the conversation, threaded onto it. This reaches a real person immediately: show the user the ex…",
   "firstSeen": "2026-11-06T16:17:10.699Z",
   "lastSeen": "2026-11-06T16:17:10.699Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 5,
   "kind": "mcp",
   "url": "https://apexai.academy/mcp",
   "name": "apex-ai-academy",
   "locator": "tool:pair_agent",
   "rule": "poisoning",
   "severity": "high",
   "message": "Description: Asks for conversation or secrets to be passed through a parameter",
   "evidence": "cter code (Account › Connect an agent). Send your agent_signup token as Authorization: Bearer (or, if your client can't set headers, as the token argum",
   "firstSeen": "2026-11-06T16:17:10.698Z",
   "lastSeen": "2026-11-06T16:17:10.698Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 4,
   "kind": "mcp",
   "url": "https://apexai.academy/mcp",
   "name": "apex-ai-academy",
   "locator": "tool:pair_agent",
   "rule": "poisoning-exfiltrate",
   "severity": "high",
   "message": "Description: Asks for data to be sent somewhere",
   "evidence": "…cter code (Account › Connect an agent). Send your agent_signup token as Authorization: Bearer (or, if your client can't set headers, as the token ar…",
   "firstSeen": "2026-11-06T16:17:10.698Z",
   "lastSeen": "2026-11-06T16:17:10.698Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 3,
   "kind": "mcp",
   "url": "https://apexai.academy/mcp",
   "name": "apex-ai-academy",
   "locator": "instructions",
   "rule": "instructions-exfiltrate",
   "severity": "high",
   "message": "Server instructions: Asks for data to be sent somewhere",
   "evidence": "…ent) and call pair_agent with the code. Send your Apex token as a Bearer Authorization header (preferred) or in the token argument. Step 1: …",
   "firstSeen": "2026-11-06T16:17:10.698Z",
   "lastSeen": "2026-11-06T16:17:10.698Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 2,
   "kind": "mcp",
   "url": "https://tandem.ac/mcp",
   "name": "ac.tandem/docs-mcp",
   "locator": "resource:tandem-docs://stable/configuration/",
   "rule": "poisoning-system-prompt",
   "severity": "medium",
   "message": "Resource description: Mentions the system prompt",
   "evidence": "…tion Configuration Providers, keys, and system instructions.",
   "firstSeen": "2026-11-06T16:17:10.443Z",
   "lastSeen": "2026-11-06T16:17:10.443Z",
   "active": true,
   "via": "registry"
  },
  {
   "id": 1,
   "kind": "mcp",
   "url": "https://tandem.ac/mcp",
   "name": "ac.tandem/docs-mcp",
   "locator": "resource:tandem-docs://stable/choosing-providers-and-models-for-agents/",
   "rule": "poisoning-addresses-ai",
   "severity": "high",
   "message": "Resource description: Addresses the AI directly",
   "evidence": "…ing Providers And Models For Agents How agents should choose providers, defaults, and per-stage model overrides.",
   "firstSeen": "2026-11-06T16:17:10.443Z",
   "lastSeen": "2026-11-06T16:17:10.443Z",
   "active": true,
   "via": "registry"
  }
 ]
}