zhihu-sync

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references zhihu/zhihu-mediacloud-uploader.git and https://openapi.zhihu.com for setup and runtime behavior, establishing common unofficial operational dependencies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill synchronizes and publishes content (articles, questions, and pins) to the Zhihu platform via Zhihu OpenAPI (SKILL.md:2-5, 230-233). This constitutes an indirect financial/service operation (submitting/publishing content to a platform API), but does not involve direct financial transactions (no transfers, charges, refunds, or trades). Under the criteria, indirect operations fall under the medium tier.