content-planner
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow and the included scripts/wechat_search.js explicitly perform searches and scrape public WeChat articles from weixin.sogou.com (and optionally resolve mp.weixin.qq.com URLs), and those untrusted, user-generated articles are required input for generating topic recommendations and the content calendar—so third-party page content can materially influence agent decisions and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata