softcopyright

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill documentation explicitly says that for arbitrary keywords it will "先搜索相关内容" and the examples (SKILL.md / 示例 2) show it "搜索 'React电商系统' 相关信息" and "展示搜索结果" before generating materials, which indicates it fetches and reads open web search results (untrusted third‑party content) as part of its workflow.