copilot-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This SDK explicitly supports connecting to external MCP servers (see "MCP Server Integration" with "https://api.githubcopilot.com/mcp/") and defining tools that fetch repository/issue/PR and other user-generated content, which the agent will read and incorporate into its responses, exposing it to untrusted third‑party content.