web-fetch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes arbitrary public web content (via scripts/fetch_web_content.py) and WeChat articles (via scripts/fetch_weixin.py targeting mp.weixin.qq.com), so the agent reads untrusted third‑party/user-generated content as part of its workflow which could enable indirect prompt injection.