gsc-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the required workflow takes user/outsider-provided CLI arguments (e.g., --body-json, --filter, --site, --url, OAuth redirect code) and directly uses them to form JSON request bodies sent to Google’s Search Console API endpoints, meaning the agent ingests attacker-controlled free text without first selecting a trusted item.