serpapi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill issues live searches to SerpApi (e.g., curl to https://serpapi.com/search?engine=google ... and extracts .organic_results, .news_results, .video_results, .local_results), which returns open/public search engine and user-generated content (Google/Bing/YouTube/etc.) that the agent is expected to read and could carry indirect prompt-injection content.