larksnap-fetch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill executes fetch.mjs, search.mjs, and edit.mjs which fetch or scrape web pages, search results, and Feishu documents from URLs provided by the user or discovered via search, introducing an indirect prompt injection risk from untrusted web content.