finance-markets-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill fetches financial news, company SEC filings, congressional stock disclosures, and research profiles via the Crawlora API, which can contain user-submitted or outsider-authored text when searched or retrieved.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes runtime API calls to Crawlora (crawlora.net), an unverified third-party service, constituting an external operational dependency with common/reputable unofficial provenance.