investment-memo-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). Yes — SKILL.md step "第二步：获取数据（按需）" directs running references/data-queries.md which instructs using ../findata-toolkit-cn/scripts/views_runner.py to fetch live data from public third‑party sources (AKShare, 东方财富, company announcements, Wind/同花顺, Xueqiu etc.), and those external, untrusted data feeds are read and used to drive the memo generation/decisions.