You'll notice
Useful3 Signal2
For unknown or remote tools the prompt shows just the tool name, not sprawling arguments.
What's wrong with this entry?
Anonymous. No account, no email.
What
For tools this process does not know about, such as remote ones, the permission prompt now shows the tool name rather than a rendering of its arguments. The stand-in preview refuses to draw anything unbounded: more than three parameters, over-long keys or values, or oversized arrays and objects.
Details
- The old pre-render helpers, and their catch-all fallback that reported render errors, were removed.
- The refusal path is a thrown error carrying
stub preview cannot render an over-bound parameter, so nothing attacker-influenced is drawn. - No gate; reachable on this build.
Evidence
stub preview cannot render an over-bound parameter
Strings lifted out of the shipped bundle, so the claim above can be checked against them.