web-search-tor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow for websearch tor up/layer-on mode, the tool routes outsider-authored search results and fetched onion pages (via --onion, web-fetch, and web-open) through Tor and ingests their page text as untrusted Markdown in an “untrusted-content” fence, exposing indirect prompt-injection risk.