xiaohongshu-weeklytop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime workflow “跑脚本/工作流” calls doubaoya.com API and ingests outsider-authored free text from the API response data.items[].title (then the workflow “铺榜 + 给中线洞察” uses that title text), so an attacker who can submit/poison the underlying Xiaohongshu content that the API returns can indirectly inject free text into what the agent reads.