soia-pkm-clip-douyin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High: the required workflow uses Playwright to fetch Douyin pages and intercept JSON responses at runtime, then inserts outsider-authored free text fields like aweme["desc"] (caption) and author.nickname into the Markdown note that the agent will return/continue to use.