xhs-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly directs the agent to navigate and interact with the public Xiaohongshu creator site (creator.xiaohongshu.com) — e.g., reading page elements like "活动话题", error messages, templates, and publish pages as part of its required steps — which exposes the agent to untrusted, user-generated third-party content that can influence subsequent actions.