soia-pkm-clip-wechat-article

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Required runtime path fetches outsider-authored public web content: scripts/archive_wechat.py calls fetch_html(url) which downloads the WeChat article HTML from the user-provided URL and then parses/extracts it into article.body/metadata that are written into the vault (and thus become LLM-readable text in the agent’s context via the skill’s outputs/receipts).