cnki-navigate-pages

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow uses an RC browser tool to navigate to a CNKI URL and then runs browser action=act kind=evaluate JavaScript that reads DOM innerText/location.href from the loaded page (outsider-authored public web content), which can be fed back into the agent context via the returned JSON fields like total, page, activeLi, and url.