sentiment-reality-gap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow and data queries (references/data-queries.md and the listed views such as stock_hot_rank_em referencing 东方财富 and xq_hot_deal referencing 雪球/股吧) explicitly fetch and ingest public third‑party web and social content (用户生成舆情) which the analysis uses to score/rank stocks and drive follow-on decisions, exposing the agent to untrusted external content that could inject instructions indirectly.