douyin-prohibited-word

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill contains an operational instruction to install an external payment package via npx -y @alipay/agent-payment@latest install, which downloads and executes third-party code from an unverified external source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses Playwright and BeautifulSoup to extract text content from arbitrary web pages supplied via URL (--url / extract_from_web()), which the agent then processes.