exa-personal-site

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to call exa-search.web_search_advanced_exa with category="personal site" to fetch and summarize personal websites and blogs (public third‑party content) as part of its normal workflow, so untrusted user-generated pages could inject instructions that influence the agent's actions.