liquidity-impact-estimator
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's required data-fetch workflow (references/data-queries.md) instructs running ../findata-toolkit-cn/scripts/views_runner.py and notes that "数据可以来自任何来源(第三方数据平台、开源行情、盘口数据等)", meaning the agent will fetch and ingest open third‑party market/data sources that directly inform analysis and actions, so untrusted external content can materially influence behavior.
Audit Metadata