internet-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's "Search the Web" workflow in SKILL.md calls the public endpoint POST /api/data/search/web and returns titles/snippets/URLs from arbitrary public websites that the agent is instructed to read and use for research and decisions, exposing it to untrusted third-party content that could contain indirect prompt injections.