alibabacloud-bailian-memory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes workflow 1/4 using outsider-provided conversation text passed at runtime via add_memory_messages.py --messages and search_memory.py --query into DashScope Memory Library endpoints (POST /add-async and POST /memory_nodes/search), so the agent ingests free text before selecting a specific item.