Aguara Watch

ezyhost

clawhub:ezyhost

View source
C
70/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

2

Score

70/100

HIGH 2

Findings (2)

HIGH
Resource URI manipulation
L238

Detects dangerous URI schemes or path traversal in resource fields

Url: "data:
FIX

Implement strict input validation on the MCP tool's parameters. Block tool calls that attempt to modify the agent's system prompt, configuration, or tool definitions.

FP?

Likely FP if the match is a tool that legitimately updates configuration (e.g., a settings manager) and mentions prompt editing only for user-facing customization.

HIGH
Resource URI manipulation
L246

Detects dangerous URI schemes or path traversal in resource fields

Url: "data:
FIX

Implement strict input validation on the MCP tool's parameters. Block tool calls that attempt to modify the agent's system prompt, configuration, or tool definitions.

FP?

Likely FP if the match is a tool that legitimately updates configuration (e.g., a settings manager) and mentions prompt editing only for user-facing customization.