tools.growthkit/revenue-intelligence

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  warn25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  tool "getSeoReport" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn).

• Supply chain

  pass25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  repository linkage verified

• Credential hygiene

  pass15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

• Permission scope

  pass15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.

• Version behavior

  warn10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  vs prior 1.10.0 (minor bump): new tool "embedMemory" appeared; new tool "searchMemory" touches a sensitive surface (email/exec/net/fs); new tool "listMemories" appeared; new tool "updateMemory" appeared; new tool "deleteMemories" touches a sensitive surface (email/exec/net/fs); new tool "clearMemories" touches a sensitive surface (email/exec/net/fs); new tool "countMemories" appeared; new tool "getChapterOverview" appeared; new tool "uploadDocument" touches a sensitive surface (email/exec/net/fs); new tool "listDocuments" appeared; new tool "getDocument" touches a sensitive surface (email/exec/net/fs); new tool "deleteDocument" touches a sensitive surface (email/exec/net/fs); new tool "createReminder" appeared; new tool "listReminders" appeared; new tool "cancelReminder" appeared; new tool "getHistory" appeared; new tool "restoreVersion" appeared; new tool "listDeleted" appeared; new tool "listTeam" appeared; new tool "sendNotification" touches a sensitive surface (email/exec/net/fs); new tool "checkNotifications" appeared; new tool "crmSearchCompany" appeared; new tool "crmGetCompany" appeared; new tool "crmCreateCompany" appeared; new tool "crmGetCompanyDeals" appeared; new tool "crmGetCompanyContacts" appeared; new tool "crmSearchContact" appeared; new tool "crmListCompanies" appeared; new tool "crmListPeople" appeared; new tool "crmGetContact" appeared; new tool "crmCreateContact" appeared; new tool "crmGetPipelines" appeared; new tool "crmCreateDeal" appeared; new tool "crmUpdateDeal" appeared; new tool "crmGetDeal" appeared; new tool "crmAddNote" appeared; new tool "crmCreateActivity" touches a sensitive surface (email/exec/net/fs); new tool "crmCheckConnection" appeared; new tool "enrichCompany" appeared; new tool "enrichPerson" touches a sensitive surface (email/exec/net/fs); new tool "findContacts" appeared; new tool "findEmail" touches a sensitive surface (email/exec/net/fs); new tool "verifyEmail" touches a sensitive surface (email/exec/net/fs); new tool "discoverSimilar" touches a sensitive surface (email/exec/net/fs); new tool "scoreLeads" touches a sensitive surface (email/exec/net/fs); new tool "getTopLeads" touches a sensitive surface (email/exec/net/fs); new tool "email_compose" touches a sensitive surface (email/exec/net/fs); new tool "createCampaign" appeared; new tool "listCampaigns" appeared; new tool "getCampaign" appeared; new tool "updateCampaign" appeared; new tool "addCampaignLeads" touches a sensitive surface (email/exec/net/fs); new tool "getCampaignLeadFields" appeared; new tool "updateCampaignLead" touches a sensitive surface (email/exec/net/fs); new tool "listCampaignLeads" appeared; new tool "pipelineStatus" touches a sensitive surface (email/exec/net/fs); new tool "pipelineRun" touches a sensitive surface (email/exec/net/fs); new tool "listLeadSignals" touches a sensitive surface (email/exec/net/fs); new tool "show_callable_leads" appeared; new tool "place_call" appeared; new tool "save_call_outcome" appeared; new tool "setWorkingMemory" touches a sensitive surface (email/exec/net/fs); new tool "getWorkingMemory" touches a sensitive surface (email/exec/net/fs); new tool "createTask" appeared; new tool "listTasks" appeared; new tool "getOpenTasks" appeared; new tool "updateTask" appeared; new tool "setTaskWeights" appeared; new tool "toggleStep" appeared; new tool "getSeoReport" touches a sensitive surface (email/exec/net/fs); new tool "getAeoReport" touches a sensitive surface (email/exec/net/fs).

• Transport config

  pass10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  remote endpoint "https://mcp.growthkit.tools" uses TLS (https); remote endpoint uses OAuth (strongest auth mode)