hithink-finance-mcp

Warn

Audited by Snyk on Nov 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The news domain (快讯, 公告解读, 专题, 个股分时新闻, and fund news via get_fund_news_article_list) returns third-party published article titles and summaries that the agent retrieves on query, so outsider text reaches the LLM only through publisher-fed data, not an open submission queue.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 14, 2026, 12:04 AM
Issues
1