cctv-news-fetcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's required workflow (SKILL.md) runs scripts/news_crawler.js which fetches and parses public CCTV pages (e.g., https://cctv.cntv.cn/... and https://tv.cctv.com/...), causing the agent to ingest and summarize open third‑party web content that could contain instruction-like text influencing its outputs.