xhs-benchmark-account-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill requires “live Xiaohongshu creator search / XHS public profile lookup / recent notes / public metrics” via the Lingzao main skill, which implies the workflow will read outsider-authored content from Xiaohongshu pages (e.g., creator notes/comments) at runtime.