market-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to collect and use information from public reports and open datasets (e.g., "来自报告或公开数据集" and "每个重要主张都需要提供来源；如果公开，收集融资和投资者历史"), so the agent is expected to fetch and interpret untrusted third‑party web content as part of its workflow and use it to drive recommendations.