docs-rs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent reads documentation pages and search results from docs.rs via Unbrowse MCP tools, which constitutes ingestion of external public content without forcing direct delivery of malicious unrequested items by default.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill connects to a third-party remote Model Context Protocol (MCP) server hosted at unbrowse.ai, which provides executable tool definitions and operational instructions for the agent's behavior at runtime.