use-404-directory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the agent connects to the external MCP server at https://404.directory/mcp and, based on the user’s query, calls workflows like search_official_docs, verify_web, and understand_webpage that ingest externally authored web/document text (even if “official”), meaning an outsider can attempt to poison via pages or tool results that the agent reads.