market-intel

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). One URL points to an unknown third-party domain (datahub.noxiaohao.com/mcp) referenced as a data/server endpoint and could plausibly be used to host or deliver untrusted binaries, while the GitHub repository link appears normal and is not itself an obvious executable download.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored free text via news_feed(...) (news headlines/articles from external RSS feeds like Cointelegraph/Coindesk/Decrypt/Blockworks and tradfi news) to derive “institutional/ETF” signals, without requiring selection of a specific item before ingestion.