xhs-note-batch-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly directs the agent to browse a user's Xiaohongshu profile using a logged-in Chrome session (references/chrome-collector.md and SKILL.md steps 2–4), scrape public user-generated note pages, import them into Get笔记, and read their web_content to synthesize a knowledge base—clearly ingesting untrusted third-party content that can influence subsequent actions.