firebase-ai-logic

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's "Core Capabilities" explicitly mentions "Search Grounding with the built in googleSearch tool," which indicates the agent can fetch and read open/public web search results (untrusted third‑party content) as part of its workflow.