We read every description in its 4 tools, from the live server, and the listing for 1.0.0. 6 checks, no findings.
Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed
Tool changes
None since Oct 26
Pinned tool set4
None change data · none can delete. Each tool is fingerprinted; every rescan compares against these hashes. Dashed access is read from the name.
Tool
Access
Description
Pinned hash
explain_concept
read
Explain a Refapp concept · Explains what a basic Refapp concept is, such as a project, candidate, referee, questionnaire, report or project template. Accepts the name in any of Refapp's languages (e.g. "Kandidat", "Prosjektmal") or a short question that names it. Returns the name in each language and what it means; when nothing matches, lists the known concepts.
sha256:9e8b…6a09
explain_status
read
Explain a Refapp status · Explain a status shown in Refapp for a candidate, project or background check. Accepts the status as shown in the app in any of Refapp's languages (e.g. "Försenade", "Review needed") or its internal name (e.g. "overdue"). Returns the label in every language and what it means; when nothing matches, lists the known statuses.
sha256:dc40…bd1e
get_help_article
read
Read a Refapp help article · Returns one article from Refapp's help center as plain text, with its links. Accepts support.refapp.com knowledge-base links only.
sha256:7659…b003
search_help
read
Search Refapp help · Searches Refapp's help center (support.refapp.com) for articles on how to use Refapp, such as sending reminders to references, project settings or background checks. Returns the best matching articles with title, link, language and a short excerpt. When no article exists in the requested language, articles in other languages are returned.
sha256:0a24…407b
Set pinned as sha256:05a0…ae6d · still listed 6 h ago
