earnings-quality
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In
scripts/normalize.py, the runtime workflow ingests free-text numeric series from user-supplied command-line flags (e.g.,--revenue,--op-margin,--net-margin,--years) viaargparseand parses them into floats, meaning an outsider can submit arbitrary text that is read by the LLM (stdout/rendered JSON) without selecting any specific trusted item first.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata