ashare-pre-st-filter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). 该 skill 的 E2 证据面会在运行时通过 scripts/fetch_sina_penalties.py 从新浪财经页面（vip.stock.finance.sina.com.cn）抓取 HTML 并解析出 title/reason/content/issuer 等字段，作为 JSON 记录喂给 LLM 上下文，属于“公共网页抓取的外部自由文本”。