Exposure scanner · FreeIs your agent one webpage away
Is your agent one webpage away
from leaking your secrets?
The Lethal Trifecta: when one agent combines private data, untrusted content, and external communication, a single poisoned webpage becomes a breach.
Step 1 · Reads
Your agent summarizes a webpage, an email, an issue. Hidden inside: instructions written for the agent, not for you.
Step 2 · Obeys
The injected prompt asks for your .env, tokens, customer records, and the agent, doing its job, complies.
Step 3 · Exfiltrates
The secrets are quietly sent out. No exploit needed. Three ordinary capabilities, chained together, are enough.
Each step is a harmless capability. Together they’re a breach. Check whether your config enables all three. Read-only, nothing stored, no sign-up.
Check your setup: paste your mcp.json
No config? Try: