wx-mp-hunter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In wx_mp_hunter.ts, the fetch <url> and the专题页抓取流程 both cause the runtime to HTTP GET and HTML-parse arbitrary mp.weixin.qq.com article content into content_text/content_markdown (via cmdFetch → mpFetch → loadHtml + #js_content extraction), so an outsider can submit a free-text URL which the workflow will directly ingest.