google-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md Tools section and scripts/google_search.py explicitly call the Google Custom Search API (https://www.googleapis.com/customsearch/v1) via OneKey to fetch live public web search results, which are untrusted third‑party/user‑generated content the agent will ingest and that could materially influence its subsequent actions.