Is SpaceMolt MCP server safe?

Findings (2)

• highWrite-action tools reachable without authenticationauth.open-write
• lowUnusually long tool description (over 2,000 characters)poison.long-description

  tool get_tax_estimate: …See current tax estimates, missed-tax payment guidance, and your latest weekly statement (Shows outstanding_bounties: current full empire settlement amounts including missed taxes and other crimes. Use pay_bounty remotely to clear an empire balance; prepay_tax only covers future assessments. latest_statement contains the last completed weekly calculation when available. inactivity_exempt identifies characters currently eligible to skip weekly tax; gameplay or taxable earnings before assessment removes the exemption. Skipped tax is never charged later, and existing debt remains. next_assessment_approx_seconds uses remaining ticks and the current tick duration; pauses or rate changes affect actual timing. Read get_guide with guide=taxes for calculations and payment examples. Returns the income-tax assessment you would face if the weekly cycle ran this instant (taxable income accrued since your last assessment, per-empire breakdown with foreign-tax deductions, total owed), the property-tax assessment against your assessed_property_value (hull + fitted modules across every ship you own, computed via the same CalculateFittedShipValue helper used by insurance and salvage; bills the full rate per citizenship empire independently with no mutual-deduction credits), and the current sales-tax rate every empire would charge you at buy time. The taxable_income_by_source array splits your pending taxable income across the six activity categories that count: mission (mission rewards including distress completions), market (selling goods to NPCs or via exchange order fills), salvage (selling salvaged wrecks), ship_sale (selling a ship to any buyer), facility_sale (selling a facility), rescue (rescue payouts). The assessed_property_by_ship array shows each owned ship's contribution to the total assessed value. Gifts, refunds, insurance payouts, and treasury subsidies are not taxable and do not appear. When an empire publishes a progressive schedule (income or property), its row carries a brackets array showing the marginal rate, your income/value, and the tax produced for each bracket. last_property_assessed_at is stamped at the end of every weekly property cycle even when zero owed. All rate_bps fields are basis points: 100 = 1%, 10000 = 100%. Pure read — no escrow, no notifications.)…