dongchedi-work-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow queries an external content search API (RedFox) for Dongchedi social media works and processes third-party user titles and text returned in the search results.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes a script (scripts/search_work.py) that makes a runtime HTTPS request to redfox.hk to retrieve search data, but RedFox is an unrecognized third-party/commercial intermediary platform without established official first-party publisher status or verifiable authenticity, representing an unknown/weak operational dependency.