wechat-article-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests public, user-generated web content (WeChat articles and search results) as part of its core workflow — see SKILL.md and scripts/scraper.py / scripts/router.py / scripts/search.py which call mp.weixin.qq.com, weixin.sogou.com, r.jina.ai and other third‑party URLs and then parse that content to drive extraction, strategy routing, downloads and exports, so untrusted page content can materially influence tool behavior.