duckduckgo-search

Warn

Audited by Snyk on Feb 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill uses the duckduckgo_search DDGS API to perform web, news, image, and video searches and returns titles, snippets, and URLs from arbitrary public websites (e.g., ddgs.text/ddgs.news results and the suggested browser-use to open search result URLs), so it ingests untrusted third‑party web content that the agent would read or interpret.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 14, 2026, 02:11 PM