weibo-hot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's script and SKILL.md explicitly fetch and parse live Weibo hot topics from the public API at https://v2.xxapi.cn/api/weibohot, which is user-generated/public social-media content that the agent reads and uses to produce responses, exposing it to untrusted third-party input that could contain malicious instructions.