investment-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires running scripts/update-data.sh to download CSVs and then reading assets/data/news_breakfast.csv (which contains source_url and summaries from 东方财富) as part of the mandatory news-analysis workflow, so the agent ingests and acts on untrusted third‑party web-originated content.