Aguara Watch

MMCP-OS · Model Context Protocol Orchestration SystemMCP‑OS fetches just the MCPs your task needs, cutting prompt bloat and toggling servers on‑demand for a lean, secure toolset.

mcp-so:MCP-OS_giao-123-sun

View source
C
70/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

2

Score

70/100

HIGH 2

Findings (2)

HIGH
Fetch URL and use as instructions
L13

Detects fetching external URLs and using the content as agent instructions or rules

prompt bloat and toggling server
FIX

Sanitize or validate all external inputs (file contents, API responses, user messages) before including them in prompts or tool calls. Implement input/output boundaries between trusted and untrusted data.

FP?

Likely FP if the matched text is the skill's own instruction set describing how to handle user input, not an actual injection payload.

HIGH
Fetch URL and use as instructions
L19

Detects fetching external URLs and using the content as agent instructions or rules

prompt bloat and managing server
FIX

Sanitize or validate all external inputs (file contents, API responses, user messages) before including them in prompts or tool calls. Implement input/output boundaries between trusted and untrusted data.

FP?

Likely FP if the matched text is the skill's own instruction set describing how to handle user input, not an actual injection payload.