bao-kao

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires automatic webfetching of public search results and third‑party sites (e.g., the "搜索执行流程" with webfetch calls to https://www.baidu.com and visits to gaokao.eol.cn / provincial education websites) and instructs the agent to read, extract and act on those pages to drive analysis and recommendations, so untrusted public content can directly influence tool use and decisions.