baoyu-post-to-x

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, the skill’s posting workflow ingests outsider-authored free text directly from the user-provided CLI parameters into the Chrome-based X editor (e.g., x-browser.ts uses the positional text argument and injects it with document.execCommand('insertText', ...)).