multi-search-engine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime path scripts/search.py takes user-supplied --query, normalizes it in _normalize_query, and then uses it to submit web search requests (e.g., _ddg_search via client.post to https://html.duckduckgo.com/html/ and then parses response.text with BeautifulSoup), so outsider-authored content from the returned search pages (titles/snippets) is ingested at runtime.