crewai

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly assigns web-search and scraping tools (e.g., SerperDevTool and ScrapeWebsiteTool) to the researcher agent and shows tasks that run those tools to fetch and ingest arbitrary public web pages and search results, which are untrusted third-party content that the agents read and act on.