hithink-finance-mcp
Warn
Audited by Snyk on Nov 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The news domain (快讯, 公告解读, 专题, 个股分时新闻, and fund news via
get_fund_news_article_list) returns third-party published article titles and summaries that the agent retrieves on query, so outsider text reaches the LLM only through publisher-fed data, not an open submission queue.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata