pi-web-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes runtime use of the web_search/Exa → Perplexity → Gemini pipeline (public web content fetched at runtime, i.e., outsider-authored text), which is then ingested as “synthesized answers with citations” into the agent’s LLM context; the workflow:"none" setting only suppresses a popup, not the web content itself.