duckduckgo-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly performs live DuckDuckGo searches and instructs the agent to extract full pages (via web_extract, browser tools, or curl) from public web URLs as shown in SKILL.md (e.g., "Workflow: Search then Extract" and the ddgs examples), which exposes the agent to untrusted third‑party web content that could carry indirect prompt injections.