lexiang-knowledge-base

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to ask users to provide the MCP access_token and to insert/replace ${LEXIANG_TOKEN} (and similar) into mcp.json or export commands, which requires the LLM to handle and potentially emit secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflows explicitly fetch and ingest external, user-provided content — e.g., SKILL.md and examples show using search_kb_search/entry_describe_ai_parse_content to read page bodies and file_create_hyperlink to import public links (mp.weixin.qq.com) for summarization and follow-up MCP actions — so untrusted third‑party content is read and can materially influence subsequent tool calls.