bggg-tiktok-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider TikTok page content is read at runtime via Playwright CDP page.evaluate(...) (e.g., scroll_collect() calling VIDEO_EXTRACTOR/AUTHOR_EXTRACTOR/PROFILE_EXTRACTOR), which extracts innerText/textContent from search results and creator pages authored by other users and places it into the agent’s LLM-visible outputs (raw_text, titles, bios) and then into research_notes.md/JSON/CSV.