douyin-account-diagnosis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill “douyin-account-diagnosis” takes outsider-provided account nickname/ID from the user, sends it to https://redfox.hk/story/api/dyUser/queryData, and then the script ingests first-class free-text fields from the API response (e.g., nickname/signature/works[].desc/works[].title) for report generation in scripts/douyin_diagnosis.py.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I found a hardcoded, high-entropy API credential in the code. The string DEFAULT_API_KEY = "ak_1e449a28ae344cd1b7aa14ca481de8bb" is a literal API key (prefixed with ak_) that appears to be an actual usable credential, not a placeholder or example. Environment-variable names (REDFOX_API_KEY) and guidance text elsewhere are documentation/placeholders and are intentionally ignored.