Hard · 45 min
The MCP server that trusts its client
Three tools over a project directory read any file on the host and run any command. They work exactly as documented — that is the problem.
Node.js · MCP
Your account
Sign in to see your attempts.
Sign in with GitHubWe read your username and email, nothing else. The email is stored encrypted and never shown.
Your account
ADMIN REVIEWER@
Orchestration Index
—
No hay vídeos de candidatos pendientes de revisión en este momento.
Recording now
The tab is still open in another window. If you closed it, everything recorded up to that point is safe.
Hard · 45 min
Three tools over a project directory read any file on the host and run any command. They work exactly as documented — that is the problem.
Node.js · MCP
No attempts yet. The library is where they start.
Before you start
· min · one attempt
Starting shares your entire monitor and agrees to the recording being reviewed against the public rubric.Publishing any part of it is a separate permission we would ask for later, and you can say no and still be scored.