longbridge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches financial market data and news via Longbridge CLI/MCP tools, where news articles represent untrusted third-party free text ingestion.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation describes integration with Longbridge Securities, providing tools for market data, chart analysis, portfolio management, and includes capabilities for trading/order-related features (explicitly referencing authentication with --trade scope and order-related features requiring a preview/confirm protocol). This falls under Direct Financial Execution Authority (market orders and trading capabilities).