wechat-reader

Warn

Audited by Snyk on Aug 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 该技能通过本地接口读取已提取的“多参宗外传-剧组”微信群聊记录(chatlog server 的 /api/v1/chatlog、talker=...@chatroom 参数返回的群消息文本),属于外部可发布/注入内容源(群聊由他人发言)会被系统运行时直接摄入。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 15, 2026, 03:23 AM
Issues
1
Security Audit — snyk — wechat-reader