china-pitch-deck

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The workflow ingests outsider-authored free text at runtime via “Secondary Sources” such as 巨潮资讯 annual reports/IR presentations and “券商研报” (broker research) / “公司官网” materials, which are fetched from external websites and then used to populate slide narrative, thereby feeding that readable text into the agent’s LLM context.