grafana-cloud-mcp-tools

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a hosted Grafana Cloud MCP server at https://mcp.grafana.com/mcp that exposes tools like search_dashboards, get_dashboard_by_uid, and get_dashboard_property which can ingest dashboard contents selected/discovered at runtime, and outsider-authored free text could be supplied indirectly via user-provided search queries or attacker-controlled Grafana resources.