lx-url-route

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's workflow (SKILL.md) routes page URLs — including public mp.weixin.qq.com links — and defaults to running commands like "lx entry describe-ai-parse-content" and "lx file create-hyperlink --url ..." to view/import content, meaning it fetches and parses untrusted public web content that could influence subsequent tool actions.