web-search
Warn
Audited by Snyk on Feb 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill uses the duckduckgo-search DDGS client to perform live searches and ingest titles, descriptions, URLs and snippets from arbitrary public web pages, news, images and videos (see SKILL.md and scripts/search.py), so untrusted third‑party content can be read and influence subsequent actions.
Audit Metadata