production-grade-agentic-system

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly defines a DuckDuckGoSearchRun tool in "5. LangGraph Agent with Tools" and the tool_node executes search_tool.run(...) on agent-generated tool calls, meaning the agent fetches and ingests open web search results (untrusted third‑party content) as part of its workflow which can influence subsequent agent decisions.