svelte-code-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow calls npx @sveltejs/mcp get-documentation / list-sections, which at runtime fetches Svelte documentation text from an external/public source and feeds it into the agent’s LLM context (public web content / fetched pages).