serp-feature-sniper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). In “Enhanced mode,” the runtime calls a SERP API (e.g., SerpAPI/Serper/DataForSEO) and then ingests extracted SERP result text/snippet content and “current holder” page content into the agent’s LLM context; those SERP snippets and fetched pages are outsider-authored web content.