cnki-advanced-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow opens a public CNKI URL and runs a browser act kind=evaluate script that reads document.body.innerText (and other DOM innerText like .pagerTitleCell), which is outsider-authored free text from a third-party website at runtime.