helium-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s required workflow depends on calling an external MCP server at https://heliumtrades.com/mcp (public web–sourced news/market data), where tool outputs like article text and bias analyses are ingested into the agent’s LLM context, creating an indirect prompt-injection surface from outsider-authored content.