linkfox-echotik-list-video-rank

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow queries TikTok video rankings and metadata from the LinkFox EchoTik API, ingesting video descriptions, creator nicknames, and other potentially untrusted content returned by the remote service.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill contains operational Python scripts that make HTTP requests to the third-party LinkFox API gateways (tool-gateway.linkfox.com, api.linkfox.com, agent-api.linkfox.com) and feedback endpoints during runtime, constituting an external service dependency with common unofficial publisher provenance.