signals-scout-mcp-tool-calls

Warn

Audited by Snyk on Oct 31, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The workflow continuously queries and ingests PostHog MCP telemetry ($mcp_tool_call), including client-submitted error messages and intent strings from external servers and users.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 31, 2026, 03:46 PM
Issues
1