mcp-apps-sdk
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The SDK’s runtime workflow exposes user/host-provided free text at the View side via
app.ontoolinput/app.ontoolresultanduseApp(...)when the host sends tool-call arguments/results afterconnect().
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata