tianqi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and scripts/curl.sh explicitly fetch live data from public weather.com.cn endpoints (e.g., d1.DOMAIN/..., mpf.DOMAIN/, etc.), meaning the agent ingests and interprets open third‑party web content as part of its workflow, which could allow indirect prompt injection via that content.