a-share-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's required scripts (e.g., scripts/fetch_market_data.py and scripts/strategy_multi_factor.py) call AKShare to pull live data from public web sources (ak.stock_zh_a_spot(), ak.stock_zh_index_spot_sina(), ak.stock_zh_valuation_baidu(), ak.stock_fund_flow_concept(), ak.stock_board_concept_cons_em(), etc. — i.e., Sina/Eastmoney/Baidu/THS) and the agent is mandated to read and act on that fetched third‑party content to compute indicators, select stocks, and generate reports, so untrusted public content can materially influence decisions.