baidu-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's scripts/search.py sends queries to Baidu's web_search API (https://qianfan.baidubce.com/v2/ai_search/web_search) and returns "references" from live web pages (as described in SKILL.md), meaning the agent ingests untrusted public web content that can influence its subsequent decisions or actions.