yy-wechat-to-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—when the script is unavailable, the workflow uses a runtime web fetch of the user-supplied mp.weixin.qq.com URL and then extracts the outsider-authored article HTML (js_content / rich_media_content) into readable Markdown text that would be included in the agent’s context/output.