Anyquery Universal SQL Engine with MCP Integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md states the built-in MCP server "exposes all installed data sources as tools accessible to AI agents" and lists connectors to public/user-generated sources like GitHub, Notion, Chrome bookmarks and files, meaning the agent will fetch and run SQL against untrusted third‑party content that can influence its subsequent actions.