qinghu-douyin-social

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to fetch Douyin social media metrics, hot topics, videos, comments, and user profiles via the external API endpoint https://www.iqinghu.com/api/desktop/qh/mcp. Since video comments and user-generated content retrieved through these tools contain outsider-authored free text without pre-filtering, this introduces an indirect prompt injection risk.