xiaohongshu-weeklytop

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The Skill instructs the Agent to help users set the REDFOX_API_KEY by producing shell/PowerShell commands like export REDFOX_API_KEY=<值> and to verify with echo, which requires the Agent to accept and embed the user's API key verbatim into generated commands/outputs, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 skills/xiaohongshu-weeklytop 的运行流程中，脚本会调用 https://redfox.hk/story/api/cozeSkill/getXhsCozeSkillDataSeven?... 拉取小红书“热门笔记”中的可读文本字段（如标题/作者等）并直接用于输出表格与 HTML，属于外部（第三方用户/帖子作者）文本进入运行时展示链路。