douyin-hotlist-overall

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill clearly ingests public Douyin (抖音) content — the SKILL.md describes "抖音全网实时热点" and providerConfig lists an endpoint (/api/v1/douyin/app/v3/fetch_hot_search_list) indicating the backend fetches public/user-generated social-media hotlist data which the agent reads and uses to drive outputs, so untrusted third-party content can influence behavior.