known_bad_lookup

2 registry entries were observed exposing a tool named known_bad_lookup — none of them flagged as a privileged capability.

Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 8,491 of 26,663 scannable entries (32%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.

  1. io.github.jamesdfinance-dev/lazaretto
    trust 60/100 · BMCP serverobserved · static extraction
    Verify a skill, tool, or package for malicious behavior before your agent installs it. Hosted.
  2. lazaretto-mcp
    trust 60/100 · BMCP serverobserved · static extraction
    MCP server for Lazaretto: check a lockfile for known-malicious dependencies (free), scan a skill, tool, or package before an agent installs

All indexed toolsSearch the registry for known_bad_lookup