crawl-xueqiu-user-timeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's script scripts/crawl_xueqiu_user_timeline_api.py (and SKILL.md usage) explicitly opens and fetches public, user-generated content from xueqiu (e.g., fetching https://xueqiu.com/v4/statuses/user_timeline.json and taking page snapshots via agent-browser), which the agent parses and can use for downstream analysis, so untrusted third-party posts can influence its actions.