wechat-official-account-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes using BrowserAct to access live public WeChat pages/URLs at runtime and extract visible comment/article text (outsider-authored free text from public web content) into the agent’s context for processing/export.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly directs the agent at runtime to automatically install the BrowserAct Skill using https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main, which is a required runtime installation that would fetch and execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The Skill explicitly directs the agent to automatically install the BrowserAct CLI and treat it as a required runtime dependency "without asking the user to confirm," which pushes the agent to modify the host system (install software) and bypass explicit user approval — a behavior that can alter machine state and may require elevated privileges.