gzh-subscribe

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). Insecure: the skill explicitly shows and recommends embedding the API key directly in commands and a config file (e.g., CLI --api-key and echoing JSON), which requires handling and potentially outputting secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). assets/subscribe.py 的 fetch_all_articles→fetch_account_articles 从红狐接口返回的文章字段（title/summary/author/url 等）被直接拼入 generate_category_sections 生成 HTML 日报，因此可被公众号内容“作者/发布者”的免费文本间接注入到运行时展示文本流中。