wechat-article-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to download WeChat articles from user-provided URLs via an MCP tool, which ingest external web page content containing outsider-authored free text without prior selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill utilizes an external remote MCP fallback endpoint (https://changfengbox.top/api/mcp) for routing article downloads and collection extraction when the local server is unavailable, representing an unverified third-party operational dependency with unknown publisher provenance.