tianchuan-perspective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly requires the agent to fetch and research open third‑party sources ("⚠️ 必须使用工具（WebSearch等）获取真实信息，不可跳过" in SKILL.md Step 2) and the repo contains tooling and references that ingest public user‑generated content (e.g., YouTube subtitle downloader script and many WeChat/B站/github references in references/research/), so untrusted web content would be read and could materially influence the agent's actions.