boss-agent-cli-job-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for this skill is job search/detail via the boss CLI/Python SDK (e.g., boss search, boss detail), which necessarily fetches job listings and job descriptions from BOSS/Zhipin (public web content / outsider-authored text) and then returns that readable text inside the JSON data field that the agent would pass into its LLM context.