sister-macro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md's "数据采集" and "执行流程" explicitly require using web_search to fetch real‑time data from public third‑party sites (Investing.com, TradingView, CoinMarketCap, 新浪财经, etc.), so the agent will ingest and act on untrusted web content that can materially influence its analysis and actions, enabling indirect prompt injection risk.