earnings-team

Warn

Audited by Snyk on Jul 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). 该 Skill 的运行时流程会通过“公司IR页面、SEC EDGAR、港交所披露易、巨潮资讯网、Seeking Alpha、雪球”等外部网页/第三方来源获取财报原文、电话会纪要与管理层材料,并将其作为可读文本喂给后台 4 个研究 Agent(阶段一·第一步/第三步),属于“公共 web content fetched at runtime — pages/articles/scraped sites”的外部自由文本注入风险。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 4, 2026, 01:03 PM
Issues
1
Security Audit — snyk — earnings-team