ddg-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path (scripts/ddg_search.py calling ddgs.text/news/images/videos(...), fetch_json("https://api.duckduckgo.com/?..."), and resolve_final_url()/bang fetching DuckDuckGo responses) ingests outsider-authored free text from the web/search results and instant-answer/HTML pages it retrieves.