mcp-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/evaluation.py, the agent_loop sends the evaluation XML’s (outsider-authored free text if the eval file is provided by a user) directly as the LLM’s user message and then iterates tool calls based on the model’s free-form output.