skills/beepboop2025/financial-evidence-skills/financial-evidence/Snyk

financial-evidence

Warn

Audited by Snyk on Aug 24, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text by fetching fixed public JSON endpoints (e.g., https://palimpsest.info/readings/china-index-latest.json and other Seiche/LiquiLens/Undertow APIs) via fetch_evidence.py, where the fetched document content is parsed and included in the evidence packet as untrusted data.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 24, 2026, 01:09 PM

Issues

1

Security Audit — snyk — financial-evidence