lark-workflow-stock-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly uses "WebSearch" to fetch market prices, earnings releases, and other open-web market data in the core flows (第一层: 自选股监控; 第二层: 财报提醒; 第四层: 自动选股), which the agent is expected to read and act on (trigger notifications, generate analyses, and drive automated decisions), so untrusted third-party content could indirectly inject instructions.