bing-image-search-mcp
Warn
Audited by Snyk on Mar 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill calls Bing Image Search via the OneKey Gateway (see SKILL.md and scripts/search_images.py which invoke the "search_images"/"search_images_batch" APIs) and returns public web-derived titles/URLs/thumbnails that the agent is expected to read and could influence follow-up decisions, so untrusted third‑party content could enable indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata