gemini

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's README explicitly states "Gemini automatically uses google_web_search when needed", meaning the gemini CLI can fetch and ingest open web search results (public third-party content) that the model will read and use, exposing it to potential indirect prompt injection.