exa-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can be ingested because the required runtime workflow calls Exa’s web search (client.search_and_contents / client.search) and/or URL extraction (client.get_contents) to fetch arbitrary public web page text, which is then serialized into JSON fields like text/highlights and becomes LLM-readable context for downstream use.