openlibrary

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent searches Open Library (openlibrary.org) using search and retrieval tools, which falls under actively fetching public library catalog content (low risk).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill configures and connects an external Model Context Protocol (MCP) server hosted at https://unbrowse.ai/mcp/openlibrary.org, which acts as an operational dependency supplying remote tool definitions and execution capability at runtime.