MCP Builder
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The "Tool with External API" example explicitly fetches public, user-generated content from GitHub (axios.get(
https://api.github.com/repos/${owner}/${repo})), which the MCP tool returns for the agent to read and could materially influence subsequent decisions or tool use.
Audit Metadata