scrum-master

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to connect to external MCP servers (see SKILL.md and references/integrations.md, e.g., the MCP Registry https://registry.modelcontextprotocol.io and servers for Jira, Trello, GitHub, GitLab, Linear, Azure DevOps) and to fetch/read boards, issues, sprint data and comments (user-generated/untrusted content) which the agent is expected to interpret and act on (create/update/move issues, generate reports), so third‑party content can materially influence tool use and decisions.