multi-source-web-researcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow performs runtime web research via tools like local-web_search and pdf-tools-read_pdf_pages, which can fetch and extract readable text from outsider-authored public web pages/PDFs (e.g., arbitrary search results and linked PDFs) into the agent’s LLM context.