wechat-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill instructs the agent to "使用网络搜索" (use web_search) to verify real-time/edge information and even shows a public example URL (https://b23.tv/...), which requires fetching and interpreting open, user-generated web content from untrusted third-party sites.