freehire-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the freehire-search skill, the search command calls the public API endpoint /api/v1/agent/jobs/search and directly ingests each job posting’s hydrated description field from the response (which can contain outsider-authored free text from the job sources), returning/passing it to the caller at runtime.