moda-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests arbitrary public web content (e.g., upload_file(source_url=…), create_brand_kit(url=…), and get_moda_canvas(url=…)) as shown in SKILL.md and references/tools.md, and it tells the agent to read/interpret those attachments/brand-site data (attachments with role "source", brand-kit extraction) to drive design, template selection, and task behavior—so untrusted third-party content can materially influence tool use and actions.