cnki-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly navigates to the public CNKI search page (https://kns.cnki.net/kns8s/search) and runs evaluate_script to scrape DOM content and paper links, which are untrusted third‑party web pages the agent reads and uses to decide follow-up navigation and exports.