analyse-smartmoney-darkpool

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads third-party free text by fetching and parsing the live FINRA TRF short-volume page at https://finra-markets.morningstar.com/finra/finia_finra_short_volume.jsp (and the SqueezeMetrics DIX page/CSV), meaning an outsider can potentially inject poison content via that monitored web content feed that the agent consumes.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs at runtime to fetch DIX/GEX from https://squeezemetrics.com/monitor/dix (and the downloadable CSV https://squeezemetrics.com/monitor/download/dix.zip) and to pull FINRA TRF short-volume from https://finra-markets.morningstar.com/finra/finia_finra_short_volume.jsp, which are runtime data fetches that directly control the agent's analytic outputs.