boss-job-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to visit and scrape job listings from the public site Boss直聘 (https://www.zhipin.com) and the browser script (agent.browser.execute_task) will load and extract that third‑party, user‑provided content as part of its workflow, exposing the agent to untrusted input.