douyin-daily-hot

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill instructs the user or agent to install an npm package from @alipay/agent-payment via npx -y @alipay/agent-payment@latest install, which is a suspicious installation source not matching an official/credible package distribution channel for Alipay.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries a Douyin hot ranking API endpoint (https://redfox.hk/story/api/dy/search/likesRank) which returns user-generated social media content titles and metadata from Douyin.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements a direct financial operation (recharging credits via Alipay cashier URL when API quota is insufficient). It instructs the agent to trigger payment, submit, and poll payment status via instructions-only steps without establishing qualifying independent service-side access control over the payment route itself.