search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's scripts/search.sh builds a Google search URL and posts it to Bright Data's API (https://api.brightdata.com/request) to ingest parsed Google SERP results (organic link/title/description), so it explicitly fetches and returns untrusted public web content that the agent would read and could influence subsequent actions.