wechat-reader
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该技能通过本地接口读取已提取的“多参宗外传-剧组”微信群聊记录(chatlog server 的
/api/v1/chatlog、talker=...@chatroom参数返回的群消息文本),属于外部可发布/注入内容源(群聊由他人发言)会被系统运行时直接摄入。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata