content-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires ingesting and “deeply analyze” user-provided reference materials (URLs/PDFs/外部文档) as part of the required workflow (see “接收信息: 参考资料” and “工作流程 -> 1. 深度分析参考资料”), which are treated as untrusted third‑party content that the agent must read and use to drive content generation—so it clearly exposes the agent to untrusted external content that could enable indirect prompt injection.