jiucai-capture

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent scrapes and ingests articles, market updates, and stock trends from the public website jiuyangongshe.com (韭菜公社) via Playwright scrapers and API interception, which are processed by Gemini AI.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains an explicit runtime installation instruction to fetch and install the Playwright Chromium browser binary from a remote external source via uv run playwright install chromium, constituting an unverifiable runtime external dependency under weak/unknown or third-party distribution provenance.