google-gemini-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow can enable Google Search grounding (tools: [{ googleSearch: {} }]), which retrieves public web pages/snippets and feeds their readable text into the model context via the grounding/retrieval mechanism (i.e., outsider-authored web content).

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)