web-searcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md Step 2 ("執行搜尋") explicitly requires using a Web Search tool to fetch public/web news pages and Step 3 instructs the agent to read and analyze those summaries and URLs (see output templates), so untrusted third‑party web content can directly influence the agent's analysis and actions.