content-topic-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and analyzes arbitrary user-provided articles and tweets as input (see "工作流程 — 第一步：分析原始内容 / 读取用户提供的文章或推文" and the usage examples), which are untrusted public/user-generated sources the agent will read and interpret, enabling indirect prompt injection.