stocks-daily

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime reads user-provided free text indirectly via .cache/stocks-daily/positions.csv (positions/ticker/type inputs) and also reads caller-provided invocation context and prior memory to drive the report, so outsider/authored content that a user posts into those files/inputs can be ingested without selecting a specific trusted item first.