skills/agentpmt/agent-skills/agentpmt-account-mcp-rest-api-setup/Snyk

agentpmt-account-mcp-rest-api-setup

Warn

Audited by Snyk on Jun 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.75). At runtime the skill’s required workflow calls AgentPMT’s MCP/REST endpoints using a user-provided Bearer Token, and the LLM ingests the returned tool/workflow metadata (outsider-authored content from api.agentpmt.com) via tools/list / tool invocation responses.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 30, 2026, 08:14 AM

Issues

1