lovstudio-clash-tun-doctor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/clash_tun_doctor.py, discover_direct_list() reads Mihomo runtime data (/connections, /rules) and service log files (recent_service_logs + read_text) at runtime and passes the extracted free-form fields (e.g., connection metadata/process/host/destinationIP and log lines) through filtering and regex parsing without requiring the user to pre-select a specific outsider-authored item.