tech-hype-vs-fundamentals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and references/data-queries.md explicitly instruct running shared scripts and tool "views" that fetch public A-share data from third-party sites (e.g., 东方财富 views like stock_individual_info_em and stock_zh_a_hist and optional XUEQIU tokens), so the agent ingests untrusted public web content that directly informs its analysis and actions.