hsgt-holdings-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (references/data-queries.md and the listed tool views like stock_hsgt_hold_stock_em / stock_hsgt_fund_flow_summary_em) explicitly fetches/scrapes public third‑party sites (东方财富, AKShare, 港交所 and optional web scraping of 东方财富) and then reads and acts on that data as part of its analysis, so untrusted public content can materially influence decisions.