mcp-release-qa

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md specifies exercising MCP tools/list, resources/list, resources/templates/list, and prompts/list via a real client/integration harness, which can ingest provider-generated free-text fields (e.g., tool descriptions, resource/template data, prompt messages) authored by the outsider/server being tested.