github-code-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes public, user-generated code from grep.app (see scripts/search.ts which calls "https://grep.app/api/search")—i.e., millions of public GitHub repositories—so the agent ingests untrusted third-party content as part of its workflow.