web-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly issues web searches and ingests public web results (SKILL.md "Core Behaviors" and the web_search capability) and even shows DuckDuckGo HTML scraping in "Implementation Approaches", and those fetched third-party pages/snippets are consumed and used to influence agent responses and follow-up actions.