`io.github.Gingiris-1031/analook`

Verdict: high-severity findings present. Endpoint https://www.analook.com/mcp/. Tools now: 8 (8 ever seen). Changes recorded: 24. Findings: 48 high, 3 low. Last probe: OK at 2026-09-30T06:17 UTC. JSON

Current tools

analyze_competitor · browse_public_reports · get_growth_audit · get_report · get_report_markdown · get_report_status · list_my_reports · run_growth_audit

Findings (72)

seen	tool	detector	severity	evidence (data, not instructions)
2026-09-18	`analyze_competitor`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`analyze_competitor`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-09-18	`analyze_competitor`	`url_in_description`	low	`https://linear.app`
2026-09-18	`analyze_competitor`	`cross_tool_reference`	high	`references sibling tool 'get_report_status'`
2026-09-18	`get_report_status`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`get_report_status`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-09-18	`get_report_status`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-09-18	`get_report`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`get_report`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-09-18	`get_report`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-09-18	`get_report_markdown`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`get_report_markdown`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-09-18	`get_report_markdown`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-09-18	`list_my_reports`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`list_my_reports`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-09-18	`list_my_reports`	`cross_tool_reference`	high	`references sibling tool 'get_report'`
2026-09-18	`run_growth_audit`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`run_growth_audit`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-09-18	`run_growth_audit`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-09-18	`get_growth_audit`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`get_growth_audit`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-09-18	`get_growth_audit`	`cross_tool_reference`	high	`references sibling tool 'run_growth_audit'`
2026-09-18	`browse_public_reports`	`model_directed_instruction`	high	`upports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER inclu`
2026-09-18	`browse_public_reports`	`secret_material_reference`	high	`g names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a us`
2026-08-20	`analyze_competitor`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`analyze_competitor`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-20	`analyze_competitor`	`url_in_description`	low	`https://linear.app`
2026-08-20	`analyze_competitor`	`cross_tool_reference`	high	`references sibling tool 'get_report_status'`
2026-08-20	`get_report_status`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`get_report_status`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-20	`get_report_status`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-20	`get_report`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`get_report`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-20	`get_report`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-20	`get_report_markdown`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`get_report_markdown`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-20	`get_report_markdown`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-20	`list_my_reports`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`list_my_reports`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-20	`list_my_reports`	`cross_tool_reference`	high	`references sibling tool 'get_report'`
2026-08-20	`run_growth_audit`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`run_growth_audit`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-20	`run_growth_audit`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-20	`get_growth_audit`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`get_growth_audit`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-20	`get_growth_audit`	`cross_tool_reference`	high	`references sibling tool 'run_growth_audit'`
2026-08-20	`browse_public_reports`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-20	`browse_public_reports`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`analyze_competitor`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`analyze_competitor`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`analyze_competitor`	`url_in_description`	low	`https://linear.app`
2026-08-14	`analyze_competitor`	`cross_tool_reference`	high	`references sibling tool 'get_report_status'`
2026-08-14	`get_report_status`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`get_report_status`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`get_report_status`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-14	`get_report`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`get_report`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`get_report`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-14	`get_report_markdown`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`get_report_markdown`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`get_report_markdown`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-14	`list_my_reports`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`list_my_reports`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`list_my_reports`	`cross_tool_reference`	high	`references sibling tool 'get_report'`
2026-08-14	`run_growth_audit`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`run_growth_audit`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`run_growth_audit`	`cross_tool_reference`	high	`references sibling tool 'analyze_competitor'`
2026-08-14	`get_growth_audit`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`get_growth_audit`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`
2026-08-14	`get_growth_audit`	`cross_tool_reference`	high	`references sibling tool 'run_growth_audit'`
2026-08-14	`browse_public_reports`	`model_directed_instruction`	high	`used for analytics and user intent tracking. YOU MUST provide 15-25 words (count carefully). NEVER use first person ('`
2026-08-14	`browse_public_reports`	`secret_material_reference`	high	`NEVER include sensitive information such as credentials, passwords, or personal data. Example (20 words): "Searching ac`

Change history (24)

when	tool	kind	severity
2026-09-18 12:17	`analyze_competitor`	mutated	high
2026-09-18 12:17	`get_report_status`	mutated	high
2026-09-18 12:17	`get_report`	mutated	high
2026-09-18 12:17	`get_report_markdown`	mutated	high
2026-09-18 12:17	`list_my_reports`	mutated	high
2026-09-18 12:17	`run_growth_audit`	mutated	high
2026-09-18 12:17	`get_growth_audit`	mutated	high
2026-09-18 12:17	`browse_public_reports`	mutated	high
2026-08-20 12:17	`analyze_competitor`	mutated	high
2026-08-20 12:17	`get_report_status`	mutated	high
2026-08-20 12:17	`get_report`	mutated	high
2026-08-20 12:17	`get_report_markdown`	mutated	high
2026-08-20 12:17	`list_my_reports`	mutated	high
2026-08-20 12:17	`run_growth_audit`	mutated	high
2026-08-20 12:17	`get_growth_audit`	mutated	high
2026-08-20 12:17	`browse_public_reports`	mutated	high
2026-08-14 12:17	`analyze_competitor`	added	high
2026-08-14 12:17	`get_report_status`	added	high
2026-08-14 12:17	`get_report`	added	high
2026-08-14 12:17	`get_report_markdown`	added	high
2026-08-14 12:17	`list_my_reports`	mutated	high
2026-08-14 12:17	`run_growth_audit`	mutated	high
2026-08-14 12:17	`get_growth_audit`	mutated	high
2026-08-14 12:17	`browse_public_reports`	mutated	high

Probe history

09-30 06:17 OK (8) · 09-30 00:17 OK (8) · 09-29 18:17 OK (8) · 09-29 06:17 OK (8) · 09-29 00:17 OK (8) · 09-28 18:17 OK (8) · 09-28 12:17 OK (8) · 09-28 06:17 OK (8) · 09-28 00:17 OK (8) · 09-27 18:17 OK (8) · 09-27 12:17 OK (8) · 09-27 06:17 OK (8) · 09-27 00:17 OK (8) · 09-26 18:17 OK (8) · 09-26 12:17 OK (8) · 09-26 06:17 OK (8) · 09-26 00:17 OK (8) · 09-25 12:17 OK (8) · 09-25 06:17 OK (8) · 09-25 00:17 OK (8) · 09-24 18:17 OK (8) · 09-24 12:17 OK (8) · 09-24 06:17 OK (8) · 09-23 12:17 OK (8) · 09-23 06:17 OK (8) · 09-23 00:17 OK (8) · 09-22 18:17 OK (8) · 09-22 12:17 OK (8) · 09-22 00:17 OK (8) · 09-21 18:17 OK (8)

Run or depend on io.github.Gingiris-1031/analook? ToolDrift watches servers for tool changes every six hours (watch plans open when its checkout is configured).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).