huashu-design

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs include many direct GitHub release asset links and a raw.githubusercontent.com file hosted under an individual account — release pages and raw file hosts can deliver arbitrary binaries/media and are commonly used to distribute untrusted files, so treat them as potentially suspicious unless you trust the repo/maintainer.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 SKILL.md 的「核心原则#0」中，若用户提到具体产品/技术/事件等，runtime 会执行 WebSearch 并读入搜索结果的权威页面/片段文本进行事实验证（而搜索结果会包含外部、可能被投毒的自由文本）。