earnings-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md:44-51 requires fetching “财报原文/电话会纪要/管理层致股东信” from outsider-authored public sources (e.g., 公司IR页面、SEC EDGAR、港交所披露易、Seeking Alpha、雪球等), whose readable page/text content would be ingested into the agent’s LLM context at runtime.