deep-fact-check-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow and README explicitly accept and retrieve open web content (e.g., "深度核查: https://example.com/article") and the reports cite public sources such as damiencharlotin.com, arXiv, Reuters and MarketBeat, so the agent ingests untrusted third‑party web content which it reads and interprets.