gzh-subscribe

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow fetches WeChat Official Account articles from a remote API configured by user subscriptions, where third-party article titles, summaries, and authors can be ingested and processed.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents operational recharge workflows involving Alipay cashiers triggered by API credit exhaustion (code=3210) with automated payment execution (submit-payment and poll-payment-status), constituting a direct financial operation (purchase/settlement authorization) without independent access controls at the skill or execution layer.