wps-doc-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is fetched at runtime from public KDocs/ProcessOn endpoints (e.g., https://drive.kdocs.cn/api/v5/links/<share_id>?review=true and https://wps.processon.com/wpsapi/diagrams/view/api?...) and then parsed into definition/comments and written into Markdown (build_markdown() → render_node()), which becomes LLM-readable text in the agent context.