yueyang-house

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). 该技能要求通过命令行参数（npx -y xiaolu-house config --set-api-key ）设置/使用 API Key 并要求代理执行这些命令，意味着 LLM 需要在其输出中包含密钥的明文，从而存在凭据泄露风险。

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). 该 SKILL 的运行时流程是通过 npx -y xiaolu-house <命令> 调用外部 CLI/后端来获取房源/成交/学校/新房等信息；这些结果通常来自平台的网页/接口内容，属于“公共网页/外部平台返回的文本被读入上下文”的间接提示注入风险路径。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill requires executing commands like "npx -y xiaolu-house" at runtime, which fetches and runs remote code from the npm package (e.g., https://www.npmjs.com/package/xiaolu-house), so this is a runtime external dependency that executes remote code.