ljg-invest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — SKILL.md's "輸入" section explicitly requires using a "Research skill 或 subagent 抓取最新財報和行業資料" (i.e., fetching public financials/industry data from the open web) which the agent is expected to read and use to drive investment judgments, exposing it to untrusted third‑party content that can materially influence actions.