google-web-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md defines a google_web_search tool that uses Google Custom Search to fetch open web pages and images (third‑party URLs) and explicitly instructs the agent to read and cite those results when making claims, so untrusted public web content can influence actions.