market-event-interpreter
Warn
Audited by Snyk on Jun 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 该技能在“事件信息采集”步骤会调用
SearchFinancialNews/NewsInfoList等工具去检索/获取“金融资讯/研报舆情/行业新闻”等公开新闻内容,这些通常包含第三方作者的自由文本,并会被工具结果作为可读文本注入到LLM上下文中进行“事件分析/话术生成”。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata