Evidence row 1257928

What was observed

{
  "count": 3,
  "tools": [
    {
      "description": "Free, offline. Call BEFORE running a shell/PowerShell command copied from a README, issue, website or chat: flags download-and-execute, encoded PowerShell, LOLBins, disabling antivirus, known malware domains and pipe-to-shell from unknown hosts.",
      "inputSchema": {
        "properties": {
          "cmd": {
            "description": "command or text block",
            "type": "string"
          }
        },
        "required": [
          "cmd"
        ],
        "type": "object"
      },
      "name": "check_command"
    },
    {
      "description": "Free, read-only. Call BEFORE following a GitHub repo's install/setup instructions or running its commands: scans the README for download-and-execute one-liners (iwr|iex, curl|sh from unknown hosts), obfuscated or base64 payloads, known malware domains, agent-targeted prompt injection, password-protected archives. Returns verdict dangerous | review_before_running | no_red_flags with line evidence. Paid full check (0.005 USDC via x402) adds package.json install scripts, typosquatted deps, install.sh/setup.py, .vscode autorun tasks and fake-star signals.",
      "inputSchema": {
        "properties": {
          "repo": {
            "description": "github.com/owner/repo or owner/repo",
            "type": "string"
          }
        },
        "required": [
          "repo"
        ],
        "type": "object"
      },
      "name": "check_repo"
    },
    {
      "description": "How to buy the full repo check via x402. Does not pay.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "full_report_info"
    }
  ]
}

What the leaf hashes

{"body":"7528a8a0170f45234034ec5f4479d596fdb44d3831b597532765a7e91a1619e0","id":1257928,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793377423158601,"prev":null,"subject":"b0d2274f-944f-4b6d-b37e-14196116035f","subject_kind":"endpoint"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.