baidu-hot-cn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md and scripts explicitly list and reference fetching data from the public "百度热搜榜 API" (and import/use requests), meaning it ingests public/untrusted trending content which the agent reads and uses for trend analysis and decision-making.