The Signals column

The densest column in the table, and the one that repays learning.

MCP server badges

Which MCP servers this request declared. This is how you find out that a request to summarize a pull request also had a database server and an HTTP client available.

Risk finding badges

One per detector that fired, in a warning colour, with a count. secrets ×2 means the secret scanner found two.

The badge never shows the value. Findings carry the kind and the count only — the detectors are built so that the matched text is never stored. For the dependency detector, the tooltip does show the offending package names, because a package name is not a secret and knowing which one was proposed is the entire point.

The classifier badge

A millisecond figure — how long the prompt-injection classifier took — with the score in its tooltip. It is shown because the classifier runs in parallel with the upstream call and you should be able to confirm that it is not costing your developers latency.

Reading a row quickly

A row with no badges is ordinary traffic. A row with MCP badges and no risk badges is an agent doing agentic things safely. A row with several MCP badges and a risk finding is the one to open.