web-search

Warn

Audited by Snyk on Aug 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The skill (“Web Search”) runs scripts/search.py which uses the user-provided query as keywords in DDGS().text/news/images/videos(...) and then formats and returns the result body/description fields (outsider-authored free text from the web) in stdout or saved output without selecting specific items first.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 1, 2026, 09:26 AM
Issues
1
Security Audit — snyk — web-search