guodegang-perspective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md agentic workflow explicitly requires using web tools ("⚠️ 必须使用工具（WebSearch等）获取真实信息，不可跳过" in SKILL.md Step 2) and the README/references point to public web sources (B站, news sites, media), so the agent will fetch and interpret open/public third‑party content as part of its mandatory research step — creating a clear channel for untrusted user‑generated web content to influence decisions and actions.