review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Yes — a Google Drive file link is a personal file-hosting download that can contain arbitrary executables and is commonly abused to distribute malware, especially when users are instructed to download/execute files without verifiable provenance.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). 技能说明第2步“获取协议： 从文件路径、云文档链接、合同管理系统ID或粘贴文本获取”（示例包括 https://drive.google.com/...），并在第3步读取标题/内容以路由并决定后续审查技能与操作，明确会消费并依据外部/用户提供的第三方文档做出行为，因此存在间接提示注入风险。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly fetches documents at runtime from cloud links (e.g., https://drive.google.com/file/d/ABC123), which would be loaded into the agent context and therefore can directly control prompts/instructions.