tavily-search-free

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes a runtime web search via the Tavily Search API (“pi 会自动调用此技能进行网络搜索”), which will fetch public web pages and ingest their readable text (e.g., result content summaries) into the agent’s LLM context, creating an outsider-authored free-text injection surface.