crawl-xueqiu-user-timeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill fetches and processes social media posts and user timelines from Xueqiu via user-supplied profile URLs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script fetches a third-party npm package (agent-browser) from an arbitrary mirror URL (https://registry.npmmirror.com), introducing an unverifiable runtime external dependency under weak/suspicious provenance.