fastmoss-livestreams

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested from public FastMoss web pages at runtime: live_scraper.py navigates to https://www.fastmoss.com/zh/live/... and then evaluate(EXTRACT_JS) reads arbitrary <thead>/<tbody> cell innerText/textContent/title from the loaded page into the LLM context (via the tool result JSON that the agent consumes).