skills/imraywang/rayskills/ray-wechat/Snyk

ray-wechat

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). runtime reads outsider-authored free text from the user-supplied article Markdown/HTML files via render_article.py → prepare_article.py (parses --article and --html), and if draft_write is authorized it further sends the rendered HTML/content into wechat_draft.py for draft/add or draft/update.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 30, 2026, 02:45 PM

Issues

1

Security Audit — snyk — ray-wechat