investment-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Mode 10 data/market_data.py fetches public market data at runtime from outsider-run sources (e.g., yfinance/Financial Modeling Prep/CoinGecko/FRED/datos.gov.co), and the returned JSON/dicts are printed as readable text that can be ingested into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly an investment execution system. The documentation names specific brokerage/crypto/prediction-market APIs and integrations (Alpaca, Coinbase, Polymarket, Interactive Brokers), describes order types (market, limit, stop-loss), authentication (API keys, JWT, wallet signature), and explicitly lists "EXECUTE: Trade via APIs" and platform features (paper + live, position sizing, pre-trade checks). Even where some scripts are marked "planned", the SKILL.md and dependency list define concrete broker/crypto execution integrations and trading functionality. These are specific financial execution interfaces (market orders / broker API integrations), so this skill grants Direct Financial Execution Authority.