chinese-novelist-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Yes — SKILL.md's "素材积累" workflow (under "第二步：收集素材") explicitly tells the agent to perform "网络搜索、阅读相关书籍", i.e., collect/read material from the open web (public/third‑party sources), which the agent is expected to ingest and use to guide planning/writing decisions, exposing it to untrusted/user‑generated content that could carry indirect prompt injection.