user-generated-content
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs ingesting and curating public user-generated content from Xiaohongshu (e.g., "Check branded hashtag: #MyGlowUp", review DM tags/mentions, and "Xiaohongshu Main Feed: Repost directly"), so untrusted third‑party posts are read and used to drive reposting and amplification decisions.
Audit Metadata