mcp-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly instructs the agent to fetch and read public third‑party content (e.g., WebFetch of https://modelcontextprotocol.io/llms-full.txt, raw GitHub URLs like raw.githubusercontent.com, and "use web search/WebFetch as needed"), so the agent will ingest untrusted web/user-generated content as part of its workflow.