skills/daviddwlee84/agent-skills/mcp-builder/Snyk

mcp-builder

Warn

Audited by Snyk on Jul 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.65). SKILL.md contains runtime instructions that direct use of WebFetch to load README/spec markdown from public GitHub/raw URLs and the MCP site, which would ingest outsider-authored free text into the agent’s LLM context when followed.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 21, 2026, 02:15 PM

Issues

1

Security Audit — snyk — mcp-builder