earnings-preview
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The runtime workflow fetches and ingests third-party Yahoo Finance-derived text/fields via
yfinance(e.g.,ticker.info,ticker.calendar,ticker.earnings_history,ticker.recommendations) based on the user-chosen ticker, which is externally authored and not selected item-by-item within a trusted provider UI.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata