wechat-article-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill programmatically fetches and parses public WeChat search and article pages (e.g., https://weixin.sogou.com and resolved mp.weixin.qq.com article URLs), ingesting arbitrary user-generated articles and summaries as part of its workflow, which exposes the agent to untrusted third-party content and potential indirect prompt injection.