icon-retrieval

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The script (scripts/search.js) queries the public API at https://www.weavefox.cn/api/open/v1/icon and then fetches SVG content from the arbitrary returned URLs, thereby ingesting and returning untrusted public web-hosted (potentially user-generated) content that the agent reads/uses.