toutiao-news-trends

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — the skill issues HTTP GETs to the public Toutiao endpoint (https://www.toutiao.com/hot-event/hot-board/) and parses/display titles, labels, links and images from that open web source, meaning untrusted/public content is ingested and interpreted at runtime.