douyin-similar-account

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to help set and verify the REDFOX_API_KEY by generating export/SetEnvironmentVariable commands and running echo to display the variable, which requires the LLM to include or output the user's API key verbatim (high exfiltration risk).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行时路径中，脚本通过用户提供的 --account_id/昵称调用 POST https://redfox.hk/story/api/dyUser/querySimilarAccounts 获取包含 works[].title/desc 等字段的外部文本，并在 format_output()/generate_recommendation_reason()中直接读入并拼接输出。