dingtalk-workflow-stock-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly says "数据通过 WebSearch 获取公开信息" and the workflows (e.g., 深度研究 Step 1, 财报分析 Step 2, 持仓快照 Step 2, 自动选股 Step 2) require the agent to fetch and interpret public web/news/analyst content that directly influences analyses, database updates, and notifications, exposing it to untrusted third‑party input.