quark-download

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow searches and aggregates external cloud drive resources from the PanSou aggregation API (which indexes community-submitted share links and notes), ingesting outsider-authored search results and file/note descriptions into the agent context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill relies on an operational dependency fetched at runtime from PanSou (https://s.panhunt.com) for search and health check data, whose ownership and distribution are unknown, resulting in a high risk tier.