ht-scan-project

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 运行时会通过 curl 获取 https://hackertrip.space/api/match?... 的公开网页/接口返回文本（hackathons 列表的字段如 name/summary/theme 等），属于外部来源内容进入 LLM 上下文用于语义匹配。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runtime issues a curl to "https://hackertrip.space/api/match?limit=50&format=json" to load live hackathon data that directly controls the agent's recommendations (and the README also instructs executing remote install code via curl -sfL https://raw.githubusercontent.com/Jayden72Huang/hacker_trip/main/packages/skills/ht-scan-project/install.sh | bash), so remote content is fetched at runtime/install and can control outputs or execute code.