baoyu-wechat-summary

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses wx history to read WeChat group chat messages, which can contain untrusted free text submitted by external chat participants.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill utilizes wx-cli from an external GitHub repository (https://github.com/jackwener/wx-cli), which is an established open-source community project, making it a common/reputable unofficial operational dependency.