neodata-financial-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill calls an external NeoData proxy (Remote-URL https://jprx.m.qq.com/…) and its documented response (reference.md and SKILL.md) includes data.docData.docRecall[].docList[].content and .url (e.g., "http://gu.qq.com/...") returning third‑party news/研报/article text that the agent is expected to read and use to produce answers, so untrusted public content can materially influence tool behavior.