coze-web-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/search.ts, the runtime performs web/advanced search via client.webSearch/client.advancedSearch (using the user-provided query and optional sites/time filters) and then ingests untrusted third-party content fields like item.snippet and (when --need-content is set) item.content into the output.