wechat-article-aggregator

Warn

Audited by Snyk on Feb 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and downloads public WeChat articles from the third‑party mptext.top service (see SKILL.md and scripts/fetch_articles.py calling https://down.mptext.top/api/public/v1/article and /download), parses the untrusted user-generated HTML (#js_content) as part of its workflow, and returns/uses that content (Markdown/HTML/text) which could contain instructions that materially influence downstream actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 26, 2026, 12:32 AM