mcp-server-chart

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md explicitly states in the generate_path_map and generate_pin_map tool descriptions that the tool "will use these keywords to search for specific POIs and query their detailed data, such as latitude and longitude, location photos, etc.," which indicates the agent fetches and ingests public third-party POI data/media that can influence mapping and marker behavior.