china-earnings-preview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). Outsider free text can enter the LLM via runtime ingestion of “公司公告/业绩预告”, “行业研究报告”, and “卖方研报” (and potentially “get_stock_news”) fetched from external web/API sources, where the text is authored by non-operating parties and then summarized/used in the agent’s context.