websearchapi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's code (tools/websearchapi/websearchapi.js) and SKILL.md show it queries the public SearchAPI endpoint (https://www.searchapi.io/api/v1/search) to fetch web/news/video/finance/maps/hotels/flights results from the open web and returns that untrusted, user-generated/public content as JSON for the agent to read and act on.