bankbridge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads transaction data and merchant names from the user's connected financial accounts via the BankBridge MCP server, which can contain merchant descriptions and notes authored by third parties.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to connect to an external remote MCP server at bankbridge.money, but the provenance of this domain and service is unknown and unverifiable, constituting an unknown remote runtime dependency under high-risk provenance.