soia-pkm-clip-wechat

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required runtime path fetches public WeChat article HTML from a user-supplied URL (scripts/archive_wechat.py:143-164 → parse_page(..., fetch_html(...))), then extracts and embeds that outsider-authored article body into the generated Markdown (scripts/archive_wechat.py:377-443, build_document(...):499-543), which becomes LLM-readable context via the agent’s subsequent handling of the produced note/logs.