a-stock-daily-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill (scripts/a-stock-report.js and SKILL.md) explicitly fetches and parses live market data from the public site 东方财富 (http://push2.eastmoney.com/api/...) and then uses that third‑party content at runtime to build reports and trading suggestions, so untrusted external content can materially influence its outputs.