xpai-doubao-web

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill automates and browses Doubao Web (default https://www.doubao.com/ or an overridden DOUBAO_WEB_LOGIN_URL) using Playwright and directly reads page/network responses (see scripts/doubao-webapi/client.ts: generateImage uses page.on("response") to capture image URLs and generateText uses waitForTextResponse/tryExtractLatestText/readLastTextFromSelector to extract text), so it ingests untrusted third‑party web content as part of its workflow.