sourcing-in-china

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). At runtime the skill calls an external MCP server (https://mcp.chexb.com/sse) whose tools (search_products, search_suppliers, get_product_detail) return scraped public product/supplier text from Made-in-China.com, which is outsider-authored free text injected into the agent’s LLM context via the MCP tool results.