stock-watcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's scripts (notably scripts/add_stock.py and scripts/summarize_performance.py) fetch and parse live HTML from the public site 10jqka.com.cn (https://stockpage.10jqka.com.cn/{stock_code}/) and directly read/title- and text-derived data into the workflow, exposing the agent to untrusted third‑party web content.