master-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly fetches "TopHub 全网热榜" (it says "抓取 TopHub 全网热榜"/"从 TopHub 获取最新热榜"), a public third‑party source whose user-generated/open web content is read and used to select topics and drive content-generation and validation decisions, so untrusted external content can materially influence the agent's actions.