web-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow executes web search via external APIs (such as Tavily, Serper, SerpAPI, Brave, Exa, Jina, Firecrawl, or SearXNG) based on user queries, ingesting search result titles, snippets, web pages, and image metadata containing outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The web search skill makes runtime API requests to external third-party search endpoints (Tavily, SerpAPI, Serper, Brave, Exa, Jina, Firecrawl, SearXNG) and optional Gemini generation using common unofficial/third-party URLs defined in the provider reference.