hedge-fund-13f-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow pulls outsider-authored SEC EDGAR filing text (e.g., infotable.xml / form13f.xml holdings and any parsed filing content) from third parties/managers other than the operating user, which is then ingested into the agent’s LLM context for delta computation and “Why/Note” generation.