free-search-aggregator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly performs live web searches and HTML/RSS scraping of public third‑party sites (see SKILL.md/README and config/providers.yaml) and the code in src/free_search/providers.py (e.g., bing_html RSS, Mojeek HTML scraping, DuckDuckGo/Google/Baidu API calls) parses and aggregates those untrusted search results into task_search/router outputs that materially influence subsequent decisioning and storage, so external content could inject instructions.