Geek-skills-gaokao-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly requires using web_search and web_fetch (e.g., "第一步... 使用web_search了解最新命题趋势", Task A: "web_search: [...]" and "web_fetch: [权威网站URL]" in the SKILL.md and the "网络搜索工具" section), so the agent will fetch and act on open/public third‑party web content that could contain untrusted, user‑provided instructions.