douyin-daily-hot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). 运行时通过 call_api() 向 https://redfox.hk/.../likesRank 发起请求并将响应字段（如 title/workUrl/accountName 等）直接拼入 Markdown 表格输出到 LLM 上下文；这些文本来自外部第三方 API/公开内容聚合（非操作用户自有），属于“公共/第三方抓取内容”类间接提示注入风险。

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)