byted-kickart-marketing-material-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly accepts public Douyin/Haohuo product links and the material analysis workflow performs an HTTP request to the provided URL (scripts/material.py uses requests.head to follow and simplify the user-provided URL) and the SKILL.md / references/素材分析指南.md require the agent to run that material-analysis flow and act on the resulting analysis, so untrusted third‑party page content can influence subsequent tool calls and decisions.