mcp-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to fetch and read public web content (e.g., "Use WebFetch to load: https://modelcontextprotocol.io/llms-full.txt" and the raw GitHub URLs) and tells developers to "use web search and the WebFetch tool as needed," meaning the agent will ingest untrusted third‑party content from the open web as part of its workflow.