datagouv-mcp-server

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill connects to the public MCP server at https://mcp.data.gouv.fr/mcp and exposes tools (search_datasets, get_dataset, list_resources, get_resource) that fetch and have the agent read public data.gouv.fr datasets/resources (third‑party public content) which the agent uses to drive exploration and responses, enabling indirect prompt injection risk.