# Sibyl MCP Security Round 10 2026-06-03

Critical-candidate checks on patched client 0.4.7 and MCP 0.1.5.

## Summary

| Metric | Count |
|---|---:|
| Total | 4 |
| PASS | 0 |
| FAIL | 4 |

## Runs

| Run | Status | Checks | Reason |
|---|---:|---:|---|
| run-2026-06-03-mcp-run244-memory-dir-symlink-read-foreign-profile | FAIL | 0 / 1 | attacker_memory_dir_symlink_rejected; MCP follows an attacker HOME .sibyl-memory directory symlink and can read another profile's local memory DB. |
| run-2026-06-03-mcp-run245-credentials-write-overwrites-outside-target | FAIL | 0 / 1 | write_rejected_symlink_path; Hermes write_credentials follows a symlinked credentials path and overwrites an outside target file with credentials JSON. |
| run-2026-06-03-mcp-run246-install-plugin-force-modifies-foreign-plugin | FAIL | 0 / 1 | symlinked_plugins_parent_rejected; Hermes install-plugin --force follows a symlinked plugins parent and modifies another Hermes profile's sibyl plugin directory. |
| run-2026-06-03-mcp-run247-uninstall-plugin-removes-foreign-plugin | FAIL | 0 / 1 | symlinked_plugins_parent_rejected; Hermes uninstall-plugin follows a symlinked plugins parent and recursively removes another Hermes profile's sibyl plugin directory. |