building-pydantic-ai-agents

Warn

Audited by Snyk on Mar 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly documents and instructs adding WebSearch and WebFetch capabilities (see "Add Capabilities to an Agent" in references/COMMON-TASKS.md and the Task Routing Table / Quick-Start Patterns) which enable the agent to fetch and read public web pages or search results (e.g., DuckDuckGo or native web search), thereby exposing it to untrusted third-party content that could carry indirect prompt-injection.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 26, 2026, 09:23 AM
Issues
1