weixin-reader-plus

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). weixin_reader skill 在 weixin_reader.py 的 read_wechat_article(url) 中直接对用户提供的 mp.weixin.qq.com URL 发起 GET 并用 BeautifulSoup 解析 resp.text(h1/js_name/js_content 等)将公众号文章正文作为 content 读取输出,因此会摄取由外部作者(微信文章发布者)撰写的免费文本。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 07:47 PM
Issues
1
Security Audit — snyk — weixin-reader-plus