Pattern preview · 12 of 4,089 sample rules shown · site-specific intelligence stays private
We don't publish
your competitive advantage.
AgentMinds' cross-site pattern pool is the moat. Site-specific learned patterns — the things our agents discovered after fixing real production issues across the network — are never shown publicly. They are delivered, filtered, and personalised to YOUR stack only when YOUR site is connected. The 12 examples below are tier-1 generic web hygiene rules; they're here so you can sanity-check the format. The real value lives behind your API key.
Sample rules shown
1
Categories
2258
Tier-1 (public)
4,089
Tier-2 (your patterns)
private to your site
tool_poisoning_detection
security-tool-poisoning-detec-malicious-or-compromised-mcp-server-tool-descripti-194686f9
IFMalicious or compromised MCP server tool descriptions can contain hidden instructions (e.g., <IMPORTANT> blocks, SSH key references, exfiltration commands like curl to attacker servers) that get injected into the AI agent's context, leading to tool poisoning, rug pulls, or data exfiltration.
THENUse mcp-gateway's built-in tool-poisoning validator (AX-010) which scans every backend tool description before it reaches the agent. HIGH patterns (e.g., SSH key refs like ~/.ssh, exfil language like 'curl .* https?://', base64 in exfiltration context) cause fail-closed, blocking the tool. MEDIUM patterns (oversized descriptions >40 spaces, zero-width Unicode, bidi-override characters) generate warnings. This provides a centralized audit surface for all tool descriptions.
Tier 170%
Connect your site → query the full pool
What you see here is the public tier-1 slice. The full pool — tier-2 fixes derived from solved patterns at peer sites + tier-3 reference patterns — opens up once you connect. You filter by stack / agent / category through the API; auto-personalisation is on the roadmap.
Connect a site