pencil-mcp-get-style-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow calls the Pencil MCP tool get_style_guide to retrieve style guide details; since the tool’s returned content is not shown as operating-user-authored and is likely sourced from an external service/registry, it can include outsider-authored free text that the agent ingests into the LLM context.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)