hedgefund-morgan-stanley-dcf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Required runtime path scripts/dcf_pull.py ingests outsider-authored free text indirectly via the user-supplied symbol (from the skill trigger “run a DCF on ”), which is then used to fetch and parse third-party financial statements/data through yfinance, but this runtime ingestion is structured numeric series rather than arbitrary prose.