baoyu-url-to-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md (and the vendored baoyu-fetch CLI and its generic/x/youtube/hn adapters) explicitly instructs the agent to fetch and render arbitrary public URLs and to inspect the resulting markdown/JSON (Agent Quality Gate / recovery workflow) as part of decision-making, meaning untrusted third‑party page content can directly influence tool use and next actions.