stock-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly fetches live public web data (e.g., scripts/indicators.py calls query1.finance.yahoo.com and quant/data.py / portfolio/tracker.py use yfinance and AKShare) and the SKILL.md/run.py workflow requires the agent to read and act on those third‑party market feeds to produce trading signals and follow‑up analysis, so untrusted public content can materially influence its decisions.