Check outside content for prompt-injection patterns before your AI agent acts on it.
C elevated
- capability exposure inferred + 22
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 3d ago · see ecosystem CVEs →
- C · 43 → C · 51
- A · 0 → C · 43
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high dangerous code
committed secret: AWS access key id, Anthropic key, GitHub token, OpenAI key, Slack token, Stripe live key
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit c6a4154 · analyzer v33 · 9m ago
skills & prompt files 13
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/AgriciDaniel__claude-seo/AGENTS.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/AgriciDaniel__claude-seo/CLAUDE.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/coreyhaines31__marketingskills/AGENTS.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/coreyhaines31__marketingskills/CLAUDE.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/huggingface__transformers/AGENTS.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/huggingface__transformers/CLAUDE.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/langchain-ai__langchain/AGENTS.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/langchain-ai__langchain/CLAUDE.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/mempalace__mempalace/AGENTS.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/mempalace__mempalace/CLAUDE.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/modelcontextprotocol__servers/CLAUDE.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/pytorch__pytorch/AGENTS.md
- agent-rules sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/pytorch__pytorch/CLAUDE.md
danger signals16
- committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/gauntlet/corpus/suite_a.json :11
AKIAZZ…(20 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/sunglasses/firewall.py :209
AKIAYV…(20 chars, redacted) - committed secret Anthropic key sunglasses-dev-sunglasses-c6a4154/test_customer_zero.py :92
sk-ant…(45 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/tests/fp_real_world_corpus/trufflesecurity__trufflehog.md :199
AKIAYV…(20 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/tests/repo_ladder_corpus/trufflesecurity__trufflehog/README.md :199
AKIAYV…(20 chars, redacted) - committed secret Anthropic key sunglasses-dev-sunglasses-c6a4154/tests/test_false_positives.py :45
sk-ant…(45 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_fp.py :145
AKIA3X…(20 chars, redacted) - committed secret GitHub token sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_fp.py :147
ghp_7K…(40 chars, redacted) - committed secret Anthropic key sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_fp.py :149
sk-ant…(57 chars, redacted) - committed secret OpenAI key sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_fp.py :151
sk-pro…(51 chars, redacted) - committed secret Slack token sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_fp.py :294
xoxb-R…(32 chars, redacted) - committed secret Stripe live key sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_fp.py :296
sk_liv…(29 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_fuzzy.py :159
AKIA3X…(20 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_hook.py :37
AKIA3X…(20 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_init.py :335
AKIA3X…(20 chars, redacted) - committed secret AWS access key id sunglasses-dev-sunglasses-c6a4154/tests/test_firewall_starter_policy.py :205
AKIA3X…(20 chars, redacted)
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:sunglasses-dev/sunglasses/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of sunglasses-dev.