mcp-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly tells the agent to fetch and read public web documentation (e.g., "Documentation Inspection" in reference/evaluation.md: "if ambiguity exists, fetch additional information from the web" and reference/python_mcp_server.md's instruction to use WebFetch to load https://raw.githubusercontent.com/modelcontextprotocol/python-sdk/main/README.md), so it ingests untrusted, user-controlled web content that can influence tool choices and next actions.