google-search-serp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested from Google’s SERP page itself: the runtime navigates to https://www.google.com/search?... and scripts/serp-extract.py reads arbitrary page text from third-party result snippets/ads (e.g., .tF2Cxc descriptions, #tads ad text, related queries, PAA questions) into the LLM context as JSON.