soia-pkm-clip-douyin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs the runtime path to open a user-supplied Douyin URL via Playwright and intercept JSON responses; those responses include outsider-authored free text (e.g., aweme “desc” caption) that the script writes into the vault/LLM-facing document.