gzh-explosive-content-detector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行路径为用户输入关键词后直接调用 scripts/fetch_gzh_trends.py，脚本从外部接口 https://onetotenvip.com/skill/cozeSkill/getWxCozeSkillData 读取返回的文章 title/summary/oriUrl/userName 等自由文本并在 HTML/JSON 中进一步加工展示给用户。