enabled, channel metadata (topic/description) can be incorporated into the model's system prompt. Prompt injection is a documented risk for LLM-driven systems. This issue increases the injection surface

@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human

Pi Agent: Potential XSS in HTML session exports via Markdown

OpenClaw: Isolated cron awareness events were recorded as trusted system