china-stock-analysis
Warn
Audited by Snyk on Mar 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests open/public third‑party financial data via akshare (see scripts/data_fetcher.py and the SKILL.md "Step 2: Fetch Stock Data" examples that call data_fetcher.py to pull price history, financial statements, dividends, and announcements), and that untrusted public content is read and directly used to drive analysis, scoring, valuation and next actions—so external data could materially influence tool behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata