geo-explorer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill's SKILL.md explicitly requires calling the search_web tool in the "热点判断流程" to fetch current news hotspots and in the "地图资源" execution steps to extract real URLs (prioritizing Wikipedia and other public map sites), so the agent will ingest and act on open/public, user-generated web content that can steer topic selection and outputs.