google-adk

Warn

Audited by Snyk on Mar 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly includes and instructs use of built-in web search tools (e.g., google_search listed in references/tools-and-sessions.md and guidance in SKILL.md/references/agent-design.md to "Use search_web(query)" and to run web_searcher/news_searcher/arxiv_searcher), so agents will fetch and read public/untrusted web and news content that can materially influence tool use and subsequent actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 15, 2026, 11:43 AM
Issues
1