exa-company-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md explicitly instructs using exa-search.web_search_advanced_exa (and a browser fallback) to fetch public web content including news, tweets, LinkedIn and general websites, meaning the agent ingests untrusted third-party/user-generated content as part of its workflow and can act on it.