wechat-channels-crawler

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在运行流程中，Step 3 直接将用户输入的关键词用于调用 POST https://redfox.hk/story/api/sphAllData/searchWork 并读取接口返回的作品字段（如 description/title、author 等自由文本）再在 Step 4/5 进行表格化输出。

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to create a persistent scheduled job via the qoder_cron tool that will run a local script daily (modifying the host's scheduled tasks and executing code), which changes the machine's state and enables recurring execution.