{
 "server_url": "http://10.73.3.10:8000/mcp",
 "scan_results": [
  {
   "status": "completed",
   "is_safe": true,
   "findings": {
    "yara_analyzer": {
     "severity": "SAFE",
     "threat_names": [],
     "threat_summary": "No threats detected",
     "total_findings": 0
    }
   },
   "tool_name": "lookup_cve",
   "tool_description": "Look up the published details of a CVE by its identifier.",
   "item_type": "tool"
  },
  {
   "status": "completed",
   "is_safe": true,
   "findings": {
    "yara_analyzer": {
     "severity": "SAFE",
     "threat_names": [],
     "threat_summary": "No threats detected",
     "total_findings": 0
    }
   },
   "tool_name": "rank_findings",
   "tool_description": "Rank a list of findings by exploitability score and return the order.",
   "item_type": "tool"
  },
  {
   "status": "completed",
   "is_safe": false,
   "findings": {
    "yara_analyzer": {
     "severity": "HIGH",
     "threat_names": [
      "CREDENTIAL HARVESTING",
      "PROMPT INJECTION"
     ],
     "threat_summary": "Detected 2 threats: credential harvesting, coercive injection",
     "total_findings": 2,
     "mcp_taxonomies": [
      {
       "scanner_category": "SECURITY VIOLATION",
       "aitech": "AITech-8.2",
       "aitech_name": "Data Exfiltration / Exposure",
       "aisubtech": "AISubtech-8.2.3",
       "aisubtech_name": "Data Exfiltration via Agent Tooling",
       "description": "Unintentional and/or unauthorized exposure or exfiltration of sensitive information, such as private or sensitive data, intellectual property, and proprietary algorithms through exploitation of agent tools, integrations, or capabilities, where the agent is manipulated to use legitimate tools for malicious data exfiltration purposes."
      },
      {
       "scanner_category": "PROMPT INJECTION",
       "aitech": "AITech-1.1",
       "aitech_name": "Direct Prompt Injection",
       "aisubtech": "AISubtech-1.1.1",
       "aisubtech_name": "Instruction Manipulation (Direct Prompt Injection)",
       "description": "Explicit attempts to override, replace, or modify the model's system instructions, operational directives, or behavioral guidelines through direct user input, causing the model to follow attacker-controlled instructions instead of its intended programming (e.g., \"Ignore previous instructions\")."
      }
     ]
    }
   },
   "tool_name": "summarize_findings",
   "tool_description": "[redacted: lab fixture bait text for probe tp-creds; SHA-256 of the original: c50ec1fb6a189492918cab7ac62775992e82c2833403169903786d2f990d6a79]",
   "item_type": "tool"
  },
  {
   "status": "completed",
   "is_safe": false,
   "findings": {
    "yara_analyzer": {
     "severity": "HIGH",
     "threat_names": [
      "CREDENTIAL HARVESTING"
     ],
     "threat_summary": "Detected 1 threat: credential harvesting",
     "total_findings": 1,
     "mcp_taxonomies": [
      {
       "scanner_category": "SECURITY VIOLATION",
       "aitech": "AITech-8.2",
       "aitech_name": "Data Exfiltration / Exposure",
       "aisubtech": "AISubtech-8.2.3",
       "aisubtech_name": "Data Exfiltration via Agent Tooling",
       "description": "Unintentional and/or unauthorized exposure or exfiltration of sensitive information, such as private or sensitive data, intellectual property, and proprietary algorithms through exploitation of agent tools, integrations, or capabilities, where the agent is manipulated to use legitimate tools for malicious data exfiltration purposes."
      }
     ]
    }
   },
   "tool_name": "export_report",
   "tool_description": "[redacted: lab fixture bait text for probe exfil-url; SHA-256 of the original: 7ec6dced43ae3712feeae322ec915fa38c8441afbdd365905f5872ea4896b048]",
   "item_type": "tool"
  },
  {
   "status": "completed",
   "is_safe": false,
   "findings": {
    "yara_analyzer": {
     "severity": "HIGH",
     "threat_names": [
      "SYSTEM MANIPULATION",
      "PROMPT INJECTION"
     ],
     "threat_summary": "Detected 2 threats: system manipulation, prompt injection",
     "total_findings": 2,
     "mcp_taxonomies": [
      {
       "scanner_category": "SYSTEM MANIPULATION",
       "aitech": "AITech-9.1",
       "aitech_name": "Model or Agentic System Manipulation",
       "aisubtech": "AISubtech-9.1.2",
       "aisubtech_name": "Unauthorized or Unsolicited System Access",
       "description": "Manipulating or accessing underlying system resources without authorization, leading to unsolicited modification or deletion of files, registries, or permissions through model-driven or agent-executed commands system."
      },
      {
       "scanner_category": "PROMPT INJECTION",
       "aitech": "AITech-1.1",
       "aitech_name": "Direct Prompt Injection",
       "aisubtech": "AISubtech-1.1.1",
       "aisubtech_name": "Instruction Manipulation (Direct Prompt Injection)",
       "description": "Explicit attempts to override, replace, or modify the model's system instructions, operational directives, or behavioral guidelines through direct user input, causing the model to follow attacker-controlled instructions instead of its intended programming (e.g., \"Ignore previous instructions\")."
      }
     ]
    }
   },
   "tool_name": "get_status",
   "tool_description": "[redacted: lab fixture bait text for probe schema-injection; SHA-256 of the original: 6a721c2a6f146ab9c3103fc4644944a00fe04970bb115335594597976d35d147]",
   "item_type": "tool"
  }
 ],
 "requested_analyzers": [
  "yara"
 ]
}