brave-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md instructs the agent to call the Brave Search API endpoint (https://api.search.brave.com/res/v1/web/search) and extract/use result snippets/titles in agent reasoning and responses, meaning it ingests untrusted public web content that can influence subsequent actions.