china-idea-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). The workflow ingests multiple secondary screening data (e.g., “龙虎榜 (东方财富)”, “股东人数变化 (巨潮)”, “机构持仓 (季报/F10)”, “大宗交易 (交易所)”) which are outsider-authored web/market sources fetched at runtime and then converted into readable text for the agent’s LLM context.