openbb-app-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow reads live MCP resources via openbb://workspace/app-builder/index (and then routes to additional openbb://workspace/... pages), which are fetched from an external repository/service and thus can include outsider-authored free text that the agent ingests into its LLM context.