wechat-mp-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly says it will "根据领域/关键词搜索最新热点" and "搜索合适的配图素材" (hot-topic search and image search), and references/image-guide.md lists public sites like Unsplash/Pexels/Pixabay, which indicates the skill fetches and ingests open/public third‑party content that the agent reads and uses to influence topic selection and content generation.