Parameter "password" invites an agent to pass a credential or personal identifier as a tool argument, where it can be logged or exfiltrated. Confirm this data is truly required and never echoed.
finalize_document · field inputSchema.properties.passwordpassword
Tool "read_docx" looks state-changing but declares no readOnlyHint. Agents use that flag to gate risky calls; without it they cannot tell this tool apart from a safe read.
read_docx · field annotations{}
Tool "process_document_batch" looks state-changing but declares no readOnlyHint. Agents use that flag to gate risky calls; without it they cannot tell this tool apart from a safe read.
process_document_batch · field annotations{}
This is an automated, point-in-time report from passive metadata analysis (the server's own initialize and tools/list advertisement). No tools were invoked. The grade reflects deterministic checks only; findings marked "llm" are triage signals for human review and do not affect the grade. Verify any finding with its reproduce command. Rulepack rulepack-2026.08.1.