earnings-team
Warn
Audited by Snyk on Jul 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). 该 Skill 的运行时流程会通过“公司IR页面、SEC EDGAR、港交所披露易、巨潮资讯网、Seeking Alpha、雪球”等外部网页/第三方来源获取财报原文、电话会纪要与管理层材料,并将其作为可读文本喂给后台 4 个研究 Agent(阶段一·第一步/第三步),属于“公共 web content fetched at runtime — pages/articles/scraped sites”的外部自由文本注入风险。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata