wechat-mp-publisher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (SKILL.md) instructs the agent to send screenshots to a public Telegram group (-1003890797239) and wait for Daniel's explicit confirmation before clicking "publish", meaning untrusted, user-generated third-party messages are expected to be read/interpreted and directly control whether the agent proceeds to publish.