exa

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In exa.js, the runtime path takes an agent-provided query from command-line args (process.argv) and sends it to the external Exa search API, then prints the returned search result text (results.results) directly to stdout without sanitization/labeling as untrusted.