yichen-social-bookmarks-exporter

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires preserving and writing the xsec_token-containing note URLs into the exported local file (while also reading Chrome session cookies/ft data), which forces the agent to handle secret token values verbatim in its outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 技能在运行时通过 chrome:control-chrome 复用用户已登录的浏览器标签并直接读取小红书/抖音收藏页 DOM（tab.playwright.evaluate() 提取 innerText 与 a[href]），而这些文本内容来源于平台页面的用户可见内容，属于可被外部用户作者影响的自由文本暴露面。