zach-lingxing-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). 该 Skill 的运行时通过本地 stdio/HTTP 入口接收来自客户端的 JSON-RPC 请求与 HTTP body（如 tools/call 的参数），但在提供的材料中未显示其会自动读取/抓取任何“外部网页/社区内容/第三方文本”，因此无法确认存在可被外部作者通过发布内容来间接注入的免费文本摄入路径。

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes deploy/install scripts and explicit steps to configure gateways, Tailscale, and SSH tunnels (e.g. install_tailscale, install_gateway_on_ubuntu, open_ssh_tunnel) which modify system/network configuration and likely require sudo or change system/SSH settings, so it pushes actions that can alter the machine state.