sec-data

Warn

Audited by Snyk on Jun 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). El script hace requests en tiempo de ejecución a endpoints públicos de la SEC (https://data.sec.gov/api/xbrl/companyfacts/CIK{cik}.json), y luego inserta el JSON legible (p.ej., entityName, label, description y entries con val, form, etc.) en el contexto del LLM al procesarlo/convertirlo a estructuras y outputs.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 12, 2026, 09:42 PM
Issues
1
Security Audit — snyk — sec-data