multi-search-engine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Required workflow uses web_fetch to retrieve public search-engine result pages at runtime (outsider-authored web content), which can be ingested as readable text into the agent’s LLM context.