weixin-channel-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill starts a WeChat channel (see "qwen channel configure-weixin" and "qwen channel start my-weixin" in SKILL.md) that receives and interprets arbitrary WeChat user messages (third‑party, user‑generated content) as part of the agent's runtime workflow (including an "open" senderPolicy option), so those external messages could indirectly inject instructions that influence the agent's actions.