mcporter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill allows calling arbitrary remote MCP servers and fetching arbitrary URLs (e.g., "mcporter call https://api.example.com/mcp.fetch url:https://example.com" and the stdio scrape example), so the agent can ingest and interpret untrusted public web/user-generated content from third-party sites.