sn-search-market-cn
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). 该技能的运行时工作流会调用
scripts/free_market_api.py的cninfo-announcements接口(巨潮资讯公告查询接口),其返回的data.announcements[]/pdfUrl以及公告标题等字段会被作为可读文本/链接进入后续处理与LLM上下文;该内容属于第三方网站(巨潮资讯)公开公告文本/元数据,属于“公共网页/第三方站点内容”来源。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata