wechat-channels-copy-extract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Runtime path: wechat-channels-download downloads a WeChat Channels video and returns meta/content; the script then runs whisper on the downloaded audio and ingests the resulting outsider-authored transcript text (transcriptText) into the LLM context via the agent’s default prompt/workflow (indirect prompt injection risk from transcript-derived free text).