ljg-invest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs "知名公司只给名字即可——用 Research skill 或 subagent 抓取最新财报和行业数据" and also consumes pasted meeting notes, pitch decks, or founder interviews, meaning the agent will fetch and ingest external public/third‑party content (financials, industry data, user-provided materials) that it must read and that can materially influence its investment recommendations.