linkfox-google-aimodel-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). At runtime the skill sends the user-provided keyword/prompts to Google AI Mode and returns unstructured Markdown (stdout) containing Google’s synthesized answer with citations, which necessarily incorporates outsider-authored web content fetched from the public internet.