china-datapack-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). SKILL.md describes runtime ingestion of third-party, public/outsider-authored financial filings and web materials (e.g., 巨潮资讯 PDFs, 上交所/深交所 announcements, 公司官网/investor materials, 企查查/天眼查 pages) via external MCP/tool calls, which would be read as free-form text by the agent for normalization/structuring.