netlify-mcp-servers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow is an HTTP MCP server function that ingests the client’s POST body (tool call arguments) and passes it through the MCP SDK transport into the agent’s LLM context; those arguments are free-form text authored by the MCP client/agent operator (outsider) rather than the skill author.