story-long-scan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). Required workflow supports runtime web scraping: it opens public platform pages (e.g., 起点 scripts/qidian-rank-scraper.js mobile SSR fetchText(url) and parses pageContext plus HTML text; 番茄/七猫/晋江 use CDP to read document.body.innerText/__INITIAL_STATE__ and then write extracted book titles/intro into markdown), so outsider-authored book metadata/intro text can be ingested into the agent’s LLM context downstream during “data analysis/report” steps.