douyin-fetcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill uses Playwright to load a user-supplied douyin.com page and then parses the JSON body of the aweme/detail network response (page.on('response', ...) → response.json()), which is outsider-authored free text/JSON fetched from a public website at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The script calls subprocess.check_call([sys.executable, "-m", "playwright", "install", "chromium"]) at runtime (and documents "playwright install chromium"), which will download and install remote Chromium browser binaries from Playwright distribution servers (e.g. the Playwright download URLs) and thereby fetch and execute remote code during runtime.