bailian-web-search-hardened

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and the scripts/mcp-websearch.sh clearly call an external websearch API (MCP_URL = https://dashscope.aliyuncs.com/api/v1/mcps/WebSearch/mcp) to retrieve multisourced public web search results, which the agent is intended to read and use—thus exposing it to untrusted third-party content that could contain instructive or user-generated material.