china-financial-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime workflow calls external market-data MCP tools (e.g., iFind MCP / AkShare MCP) to fetch index/fund/product data; those tools can return scraped/public web content or community-sourced text that the agent ingests into the LLM context, which is outsider-authored free text.