web-media-getter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, webmedia.py fetches JSON from multiple public web APIs (e.g., Openverse/Wikimedia/Internet Archive/NASA/Pexels/Pixabay/GIPHY/Klipy) via _get() and then prints the resulting fields (including title, author, license, URLs) as --json output, which the agent will ingest into the LLM context; this is outsider-authored free-text from those sources.