algolia-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path uses Algolia’s search UI components (React InstantSearch/autocomplete) that send user-entered query text to Algolia and then ingest returned hit fields (e.g., hit.name and hit.description) for rendering, which means outsider-authored free text can be ingested via the search index contents without selecting a specific item first.