market-data
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 在
scripts/fetch_market_realtime_hkus.py运行时会调用https://qt.gtimg.cn/q=与https://hq.sinajs.cn/list=拉取批量行情文本(resp.text),并逐行解析为payload/payload_change等字段后进入quotes输出。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata