chatgpt-apps

Tool passed security scan

Malicious tool definition detected

- Host behind a stable public HTTPS endpoint (not a tunnel) with dependable TLS - Preserve low-latency streaming behavior on `/mcp` - Configure secrets outside the repo (environment variables / secret manager) - Add logging, request latency tracking, and error visibility for tool calls - Add basic observability (CPU, memory, request volume) and a troubleshooting path - Re-test the hosted endpoint in ChatGPT Developer Mode before submission ### 9.

Tool passed security scan

Malicious tool definition detected

- It intentionally uses the MCP Apps bridge by default, keeps follow-up messaging on `ui/message`, and limits `window.openai` to optional host signals/extensions.

Malicious tool definition detected

"localhost")); const isMcpRoute = url.pathname === MCP_PATH || url.pathname.startsWith(MCP_PATH + "/"); if (req.method === "OPTIONS" && isMcpRoute) { res.writeHead(204, { "Access-Control-Allow-Origin": "*", "Access-Control-Allow-Methods": "POST, GET, DELETE, OPTIONS", "Access-Control-Allow-Headers": "content-type, mcp-session-id", "Access-Control-Expose-Headers": "Mcp-Session-Id", }); res.end(); return; } if (req.method === "GET" && url.pathname === "/") { res.writeHead(200, { "content-type": "t

Prompt Injection