@3182/earnings-surprise-detector

Warn

Audited by Snyk on Jul 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). At runtime the required workflow runs scripts/verify_earnings.py, which calls the external mx-data (东方财富) service and ingests its stdout/JSON (including parsed table rows) into the agent’s context via the script’s printed output and “JSON:” block.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 7, 2026, 09:16 AM
Issues
1
Security Audit — snyk — @3182/earnings-surprise-detector