livestream-sales

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent/host to read and respond to untrusted, user-generated content from Xiaohongshu live chat, public posts, stories, and viewer comments (e.g., Step 4 "Engagement Throughout Presentation", Step 2 "Pre-Live Promotion", and Opening/Closing sections), and those live comments/purchases are used to drive scarcity, pacing, and follow-up actions—so third-party content is ingested and can materially influence behavior.