stock-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly calls stk market news (references/commands.md and SKILL.md mode "市场总览") to fetch external news items (title/summary/source/url) and instructs the agent to "提炼 3 条重要新闻" and use them to mark impacted sectors/positions, meaning untrusted public third‑party content is read and used to influence analysis and follow‑on actions.