fantasy-qiqiguaiguai

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a direct git-clone URL pointing to a GitHub repository owned by an unfamiliar, random-looking username (dacnay816y62-hub); unvetted GitHub repos presented for install are higher risk for distributing untrusted code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required workflow ingests text_fragments (用户提供的句子/截图文字/聊天内容) during fragment_intake into fragment_inventory, then uses that free text for moment/content angle/template selection and text generation, so outsider-authored text submitted by the user can be read at runtime.