tax-loss-harvesting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a tax-loss-harvesting playbook that ingests the user’s free-text scenario (e.g., “my VOO is down… and I have gains elsewhere this year”) at runtime to determine applicability and then walks through steps like wash-sale checks.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly instructs placing market trades as part of the TLH workflow (sell the losing position, same-day buy a partner ETF) and references broker APIs (Alpaca, Interactive Brokers, Schwab) for implementation. These are specific market-order and broker integrations used to move money/securities, so this is direct financial execution capability.