WWeavely.ai Forms and SurveysAn MCP service for generating smart forms and surveys using natural language prompts via the Weavely API, returning a live editor link for immediate customization.

Sanitize or validate all external inputs (file contents, API responses, user messages) before including them in prompts or tool calls. Implement input/output boundaries between trusted and untrusted data.

Likely FP if the matched text is the skill's own instruction set describing how to handle user input, not an actual injection payload.

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.