web-clipper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 脚本 scripts/clip_articles.py 在运行时会根据用户提供的 --url/--url-file 抓取并把第三方网页正文/元数据（HTML/JSON/Markdown）作为文本解析与渲染输入到本地 Markdown 输出中（静态 urllib 抓取、以及回退到 https://r.jina.ai/<原始URL> 和 https://metaso.cn/api/v1/reader），属于外部作者可控的自由文本摄入路径。

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill's wrapper/bootstrap flow tells the agent to run scripts that may automatically install Python and create files/directories in the project (i.e., perform system installs and write system-level files), which can modify the machine state and potentially require elevated privileges.