wind-financial-data-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill calls the external MCP endpoint (https://mcp.wind.com.cn/vserver_wind_financial_data/mcp/) and exposes the agent to retrieved third‑party documents via the get_financial_documents tool (news / research reports / announcements) as described in SKILL.md and scripts/cli.mjs, which the agent is expected to read and use to answer queries—so untrusted external content could indirectly inject instructions into the agent's behavior.