bestchange
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill calls the external MCP endpoint (POST https://bestchange-mcp.krutovoy.me/mcp) and uses the bestchange_search_currencies and bestchange_top_exchangers tools to ingest live BestChange API v2 data (third-party public exchanger listings) which the agent must read and act on to choose codes and ranked exchangers, exposing it to untrusted external content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata