harper-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, an outsider establishes an MCP Streamable HTTP session to the Harper /mcp endpoint and can supply arbitrary free-text inputs as tool arguments (e.g., to any custom mcpTools method) via tools/call, which the server then executes and whose results/handling can be influenced by that text.