{
 "id": "app.openkrill/injection-scan",
 "name": "Prompt Injection Scanner",
 "description": "Check text before your agent reads it: hidden instructions, invisible text and links that leak data.",
 "connect": {
  "transport": "streamable-http",
  "url": "https://injectionscan.openkrill.app/mcp"
 },
 "website": "https://tools.openkrill.app/",
 "version": "1.0.0",
 "source": "official MCP registry (registry.modelcontextprotocol.io)",
 "reliability": {
  "verdict": "reliable",
  "attempts": 8,
  "successes": 8,
  "successRate": 1,
  "consecutiveSuccesses": 8,
  "lastStatus": "ok",
  "lastCheckedAt": "2026-10-19T15:15:45.724Z",
  "lastLatencyMs": 7793,
  "toolsAdvertised": 4,
  "method": "MCP initialize + tools/list from Faceabot, identified as FaceabotProbe/1.0 plus, when the server declares a read-only tool (readOnlyHint), one call of that tool with a neutral sample input to check it really returns a result. Servers on the 2026-07-28 MCP revision (no initialize handshake) get the same checks in that revision",
  "work": {
   "verdict": "proven_working",
   "tool": "list_injection_rules",
   "attempts": 8,
   "successes": 8,
   "successRate": 1,
   "consecutiveSuccesses": 8,
   "lastStatus": "ok",
   "lastMs": 3775,
   "sampleInput": "{}",
   "method": "Faceabot calls one read-only tool (annotations.readOnlyHint) with a neutral sample input and checks that it returns a non-empty result without error."
  }
 },
 "details": "https://faceabot.com/api/catalog?id=app.openkrill%2Finjection-scan",
 "page": "https://faceabot.com/tools/app.openkrill/injection-scan",
 "badge": {
  "image": "https://faceabot.com/badge/app.openkrill/injection-scan.svg",
  "markdown": "[![Measured by Faceabot](https://faceabot.com/badge/app.openkrill/injection-scan.svg)](https://faceabot.com/tools/app.openkrill/injection-scan)",
  "note": "Live reliability badge the publisher of this server can show on its README or website."
 },
 "recentChecks": [
  {
   "at": "2026-10-19T15:15:45.724Z",
   "ok": 1,
   "status": "ok",
   "ms": 7793,
   "f_status": "ok"
  },
  {
   "at": "2026-10-19T00:05:43.195Z",
   "ok": 1,
   "status": "ok",
   "ms": 5312,
   "f_status": "ok"
  },
  {
   "at": "2026-10-18T09:05:42.505Z",
   "ok": 1,
   "status": "ok",
   "ms": 5622,
   "f_status": "ok"
  },
  {
   "at": "2026-10-18T01:15:44.269Z",
   "ok": 1,
   "status": "ok",
   "ms": 5473,
   "f_status": "ok"
  },
  {
   "at": "2026-10-17T17:05:43.130Z",
   "ok": 1,
   "status": "ok",
   "ms": 5663,
   "f_status": "ok"
  },
  {
   "at": "2026-10-17T09:00:56.908Z",
   "ok": 1,
   "status": "ok",
   "ms": 5996,
   "f_status": "ok"
  },
  {
   "at": "2026-10-17T01:01:02.256Z",
   "ok": 1,
   "status": "ok",
   "ms": 5773,
   "f_status": "ok"
  },
  {
   "at": "2026-10-16T17:50:58.283Z",
   "ok": 1,
   "status": "ok",
   "ms": 6372,
   "f_status": "ok"
  }
 ],
 "trust": {
  "access": "no sign-in needed",
  "tools": 4,
  "declaredReadOnly": 3,
  "declaredCanWrite": 1,
  "declaredDestructive": 0,
  "toolDefinitionsFingerprint": "6317efff9edf57b4a594bb5f927f49e6",
  "toolDefinitionsLastChangedAt": null,
  "toolDefinitionChangesSinceFirstSeen": 0,
  "firstSeenAt": "2026-10-18T01:15:44.430Z",
  "protocol": "2025-06-18",
  "warnings": [
   {
    "tool": "scan_text",
    "issue": "ignore_previous_instructions"
   }
  ],
  "note": "Facts observed by Faceabot when it last read this server's tool list. 'Can write' counts tools not declared read-only (annotations are self-declared). A changed fingerprint means tool names, descriptions or schemas changed since Faceabot first saw them: re-check before trusting an earlier approval."
 }
}