wechat-article-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). Yes — SKILL.md Step 1 explicitly requires using a WebSearch tool to fetch and "深度总结" content from open/public sources (official docs, X/Twitter, Reddit, 技术论坛), and those search results are then used to write the article, so untrusted user-generated content can influence the agent's outputs and actions.