{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:30:51.829Z","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection","markdownUrl":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection.md","server":{"slug":"dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection","name":"Prompt Injection Detector","registryName":"dev.workers.manhliemcn4euwlu.llmrt-companion/mcp-prompt-injection","description":"Prompt injection and system-prompt extraction testing for LLM agents. Free 8-probe sample.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"mcp-prompt-injection","type":"remote","identifier":"https://llmrt-companion.manhliemcn4euwlu.workers.dev/mcp-prompt-injection","withdrawn":false,"url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection","version":"1.1.0","transport":null,"scoredAt":"2026-11-05T09:47:55.015Z"},"score":{"total":18,"tier":"low","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":18},{"date":"2026-11-04","total":54}]},"categories":[{"name":"Endpoint Security","score":46,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 530, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.unreachable","args":{}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"530"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":0,"verdict":"fail","reasons":["Transport check failed: declared streamable-http, but the endpoint returned HTTP 530."],"codes":[{"code":"transport.http_error","args":{"status":"530","transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list."],"codes":[{"code":"schema.unreachable","args":{}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: not enough scan history yet (needs a 30-day window)."],"codes":[{"code":"stability.insufficient_history","args":{}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list."],"codes":[{"code":"toolquality.unreachable","args":{}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list."],"codes":[{"code":"toolsafety.unreachable","args":{}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Capabilities not yet verified: we couldn't read the endpoint's capabilities."],"codes":[{"code":"cap.unreachable","args":{}}]}],"inconclusive":["Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 530, which proves neither a plaintext path nor enforcement.","Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.","Stability not yet verified: not enough scan history yet (needs a 30-day window).","Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.","Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.","Capabilities not yet verified: we couldn't read the endpoint's capabilities."],"malware":[],"components":[{"slug":"mcp-prompt-injection","type":"remote","identifier":"https://llmrt-companion.manhliemcn4euwlu.workers.dev/mcp-prompt-injection","withdrawn":false,"score":18,"current":true,"url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection","markdownUrl":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection.md"}],"facts":[{"label":"Endpoint","value":"https://llmrt-companion.manhliemcn4euwlu.workers.dev/mcp-prompt-injection"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"run_free_scan","title":null,"description":"Free LLM agent security review in ~35s. Two parts: (1) 8 live adversarial probes (jailbreak / prompt injection / system-prompt extraction / tool abuse) against your agent spec, and (2) a deterministic static audit of which guardrails the spec text itself is missing. Returns a 0-100 risk score, per-finding evidence, and a paste-ready guardrail sentence for each gap.","inputs":[{"name":"spec","type":"string","required":true,"description":"Your agent / system prompt (>=20 chars)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":113},{"name":"get_scan_result","title":null,"description":"Poll a scan by job id (returned by run_free_scan) until status=done.","inputs":[{"name":"job_id","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":35},{"name":"get_pricing","title":null,"description":"PRO pricing & payment info: 44 probes / 20 attack classes / 0-100 score / CI gate / per-class remediation, 0.15 XNO (ERC-20 or Lightning) or card.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":53},{"name":"get_purchase_flow","title":null,"description":"Machine-readable autonomous purchase procedure: how an agent pays (0.15 XNO, or USDC on Base via x402) and receives the PRO download with no human in the loop (callback push + poll fallback).","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":53},{"name":"validate","title":null,"description":"Judge one delivery against the task's own acceptance rule and return {verdict: accepted|rejected, reason}. Called by the brick.blue hub when this seat is drawn as validator. Judges only machine-checkable criteria (json_schema / contains / fields); a task with no such rule is accepted, because rejecting needs evidence.","inputs":[{"name":"attemptId","type":"string","required":false,"description":null},{"name":"description","type":"string","required":false,"description":null},{"name":"input","type":null,"required":false,"description":null},{"name":"result","type":null,"required":false,"description":null},{"name":"taskId","type":"string","required":false,"description":null},{"name":"title","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":112}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T09:47:55.000Z","track":"remote","endpoint":"https://llmrt-companion.manhliemcn4euwlu.workers.dev/mcp-prompt-injection","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=manhliemcn4euwlu.workers.dev","issuer":"CN=YE1,O=Let's Encrypt,C=US","notBefore":"2026-09-11T23:50:28Z","notAfter":"2026-12-10T23:50:27Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE1,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"llmrt-companion.manhliemcn4euwlu.workers.dev.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"dev.","outcome":"verified","label":"Verified"},{"zone":"workers.dev.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"inconclusive","label":"Inconclusive","gate":null,"gateLabel":null,"status":530,"authorizationServers":[]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":530},"transports":[{"transport":"streamable-http","outcome":"http_error","label":"HTTP error","status":530,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-04","recent":[{"id":"chg_01a1ab1b-9916-73ba-bea7-4fece443c4de","kind":"check.verdict","summary":"Transport (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9916-73ba-bea7-4fece443c4de"},{"id":"chg_01a1ab1b-9917-74ef-b706-82f141146146","kind":"check.unverifiable","summary":"Tool safety (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9917-74ef-b706-82f141146146"},{"id":"chg_01a1ab1b-9917-7c6d-8742-11f0dd4d38d6","kind":"check.reason","summary":"Authorization (Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9917-7c6d-8742-11f0dd4d38d6"},{"id":"chg_01a1ab1b-9918-7354-9798-e2429eb0b131","kind":"check.unverifiable","summary":"Capabilities (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9918-7354-9798-e2429eb0b131"},{"id":"chg_01a1ab1b-9918-7920-a5b8-7c2a256dd60a","kind":"check.unverifiable","summary":"Tool coverage (100 → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9918-7920-a5b8-7c2a256dd60a"},{"id":"chg_01a1ab1b-9918-7e7d-a7d3-47da02d624d7","kind":"check.appeared","summary":"First check of Schema quality (unverified)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9918-7e7d-a7d3-47da02d624d7"},{"id":"chg_01a1ab1b-9919-7487-865d-83be470f3e7f","kind":"capture.status_changed","summary":"Endpoint reachability (reachable → not serving MCP)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9919-7487-865d-83be470f3e7f"},{"id":"chg_01a1ab1b-9919-7a21-91e0-9faeba114ce8","kind":"score.total_changed","summary":"Trust score (54 → 18)","materiality":"functional","direction":"regression","scoreDelta":-36,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1ab1b-9919-7a21-91e0-9faeba114ce8"},{"id":"chg_01a1a3e0-e7f0-790d-845b-12d614adaab6","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection#chg-chg_01a1a3e0-e7f0-790d-845b-12d614adaab6"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection/changelog.json"},"links":{"html":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection","markdown":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection.md","changelogJson":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection/changelog.json","changelogRss":"https://verifymcp.io/servers/dev-workers-manhliemcn4euwlu-llmrt-companion-mcp-prompt-injection/mcp-prompt-injection.xml","external":[{"label":"Remote endpoint","href":"https://llmrt-companion.manhliemcn4euwlu.workers.dev/mcp-prompt-injection"},{"label":"Website","href":"https://llmrt-companion.manhliemcn4euwlu.workers.dev/agent"}]}}