enterprise-info

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md/scripts/query.py at runtime ingests outsider-provided free text via the user argument words (company name/credit code), sends it to https://cn.apihz.cn/api/shiming/qyinfo.php, and then reads and formats the API’s returned JSON fields into the agent output.