exa-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required workflow explicitly instructs using Exa’s web_search_exa and web_fetch_exa tools to read full contents of user-provided and fetched web sources during runtime, which can include outsider-authored free text.