soia-pkm-clip-rednote

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—this skill fetches outsider-authored free text from public Xiaohongshu pages at runtime (HTML containing window.__INITIAL_STATE__), then parses and inserts the extracted desc/title/author/tag strings into the generated Markdown/AI-reply context.