firebase-ai-logic

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly mentions "Search Grounding with the built in googleSearch tool" (web search results) and accepts external file URLs/inline media for model input, so the agent can fetch and ingest untrusted public web or user-provided content for grounding.