mcp-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required evaluation workflow has the agent search and read content from the user's target service through the MCP server, and that service's content may include outsider-authored text, but the agent chooses what to query, so exposure requires active searching rather than forced delivery.