signals-scout-mcp-tool-calls
Warn
Audited by Snyk on Sep 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow monitors PostHog MCP tool call telemetry (
$mcp_tool_call), which includes client-submitted free text such as tool names, categories, error messages, and intent strings.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata