weixin-reader-plus
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). weixin_reader skill 在 weixin_reader.py 的 read_wechat_article(url) 中直接对用户提供的 mp.weixin.qq.com URL 发起 GET 并用 BeautifulSoup 解析 resp.text(h1/js_name/js_content 等)将公众号文章正文作为 content 读取输出,因此会摄取由外部作者(微信文章发布者)撰写的免费文本。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata