web-search-pro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly queries external search engines (SEARXNG via SEARXNG_URL and, as a fallback, Bing by fetching https://www.bing.com/search with lightpanda) and then crawls and ingests the resulting arbitrary web pages' Markdown into its reports and ranking logic, so untrusted third-party content is read and can materially influence selection and subsequent actions.