market-data

Warn

Audited by Snyk on Aug 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在 scripts/fetch_market_realtime_hkus.py 运行时会调用 https://qt.gtimg.cn/q=https://hq.sinajs.cn/list= 拉取批量行情文本(resp.text),并逐行解析为 payload/payload_change 等字段后进入 quotes 输出。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 4, 2026, 03:33 AM
Issues
1
Security Audit — snyk — market-data