Parameter "query" of tool "lookup_failure_mode" accepts a free-form string with no enum/pattern/format. If it reaches a shell, filesystem, or outbound request, it is an injection/SSRF surface.
lookup_failure_mode · field inputSchema.properties.query{"type":"string","minLength":2,"maxLength":100,"description":"Text matched again
This is an automated, point-in-time report from passive metadata analysis (the server's own initialize and tools/list advertisement). No tools were invoked. The grade reflects deterministic checks only; findings marked "llm" are triage signals for human review and do not affect the grade. Verify any finding with its reproduce command. Rulepack rulepack-2026.08.1.