google-trends

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and parses public Google Trends RSS feeds (e.g., https://trends.google.com/trending/rss?geo=...) via curl/web_fetch and instructs the agent (cron/workflows) to read and summarize those trending items, which are untrusted public search/user-generated content that could carry indirect prompt injections.