BBigQuery & Tavily FastAPI MCPbigquery & web search api + mcp server

mcp-so:query-fastapi-mcp_osushinekotan

View source

92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

Score

92/100

MEDIUM 1

Findings (1)

MEDIUM

External API response drives agent behavior INDIRECT_009

indirect-injection L6

Detects skills where external API responses control agent decisions or actions

Query & Tavily FastAPI  + based on the amount of data

FIX

Do not include content from MCP tool responses verbatim in system prompts or tool descriptions. Sanitize all dynamic content before incorporating it into prompt context.

FP?

Likely FP if the match is a static tool description that mentions dynamic content handling in its documentation, not an actual injection vector.