insider-trading-analyzer
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow and data-queries.md explicitly instruct running shared scripts (../findata-toolkit-cn/scripts/views_runner.py) to fetch and ingest public third-party data from sites such as cninfo.com.cn, eastmoney.com, xueqiu (雪球) and 同花顺, and that fetched content is then read and used to drive the analysis, ranking, and decisions in the report.
Audit Metadata