mcp-brave-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and references/tools.md define and require using the Brave Search tools (mcp__brave-search__brave_web_search and mcp__brave-search__brave_local_search) to fetch public web and local search results (titles, URLs, snippets) from open third-party sites, which the agent is expected to read and use to drive responses and follow-up actions, enabling indirect prompt injection risk.