gemini-web-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has Gemini workers search the open web and read arbitrary pages via read_page.py, and their outsider-authored page text flows back into the lead agent's context; an attacker can publish poisoned pages but cannot force the workers to select them.