you-web

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the You.com Web MCP skill, the runtime workflow can ingest arbitrary outsider-authored free text when it uses you-contents to read user-provided URLs (step 1), or when it uses you-search to fetch web snippets and then reads those results via you-contents (steps 3–4), with the agent explicitly treating all web content as untrusted external data.