paul-graham-perspective

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill explicitly instructs the agent to impersonate Paul Graham—responding "as Paul Graham" using first-person and suppressing repeated disclaimers—an instruction that captures deceptive authority and prioritizes fabricated persona (suspicious steering without clear malicious intent).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md要求在Step 2遇到需要事实的问题时使用WebSearch获取“市场数据/用户评价/社区讨论/竞争格局”等，并未限定搜索到的网页文本必须来自可信的一手来源，从而可能把外部用户发布的免费文本作为运行时输入喂给LLM。