agency-feishu-integration-developer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md’s runtime event callback flow, the Feishu webhook handler parses incoming bot message content (message.content → JSON.parse → content.text) and passes it to handleBotCommand, so outsider-authored text from Feishu chat messages can be ingested without pre-selecting a specific item.