alibabacloud-data-agent-mcp-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path reads user-provided free text via tool arguments (e.g., the query parameter passed into data_agent_create_session(...), and later data_agent_send(session_id, message) for follow-up human input) which the server then uses to generate plans/SQL/report outputs.