trend-jacking
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). SKILL.md's monitoring workflow ("第1步：建立趋势监控系统") explicitly instructs checking and using open public social sources (e.g., 小红书热搜榜, 微博热搜, 抖音热门, B站热门) and third‑party trend tools, meaning the agent would ingest and act on untrusted user-generated third‑party content that can influence decisions.
Audit Metadata