chinese-lottery-predict

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md workflow and example code explicitly fetch and scrape open public sites (e.g., zhcw.com, 500.com, sina.com.cn) and search results via DuckDuckGo/Bing/Baidu, and the agent is required to parse those untrusted web pages as input for data analysis and prediction generation, so third-party content can materially influence decisions and tool use.