stock-advisor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (模块三 "多维交叉验证" in SKILL.md) explicitly uses the built-in WebSearch to fetch研报/行业动态/最新消息 and module four also searches the web for幕僚最新动态, and those public web results are ingested and used to cross‑validate analyses and drive the private‑board decisions—so untrusted third‑party web content can materially influence the agent's actions.