web-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly performs DuckDuckGo searches via ddgr (which returns full URLs) and then instructs the agent to "use WebFetch on the URL" to fetch and synthesize full page content (see "Search Strategy" and Example Workflow in SKILL.md), thereby ingesting arbitrary public web pages that could contain untrusted, user-generated instructions.