cnki-advanced-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly navigates to the public CNKI page (https://kns.cnki.net/kns/AdvSearch) and runs an evaluate_script that reads page text and selectors (e.g., document.body.innerText, .pagerTitleCell) and returns results/url for downstream parsing/navigation, so it ingests and acts on untrusted third‑party webpage content.