semgrep-rule-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The "Research Gate (Exa + arXiv — BOTH MANDATORY)" section explicitly mandates using mcp__Exa__web_search_exa and WebFetch calls to retrieve content from Exa and arXiv (public third‑party websites) that the agent must read and use to inform rule creation, so untrusted external content can materially influence its decisions and tool use.