mcp-server-chart

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md explicitly says tools like generate_pin_map and generate_path_map "will use these keywords to search for specific POIs and query their detailed data, such as latitude and longitude, location photos, etc.", which indicates the agent will fetch and act on open/public third‑party (potentially user‑generated) content as part of its workflow.