weixin-agent-sdk

Warn

Audited by Snyk on Sep 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The workflow monitors WeChat chat feeds via long-polling to receive incoming messages (ChatRequest.text) from outsiders, which are passed directly into the AI agent prompt without filtering.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 12, 2026, 07:23 PM
Issues
1
Security Audit — snyk — weixin-agent-sdk