end-to-end-funding-signal

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt explicitly asks for "API access? Yes (provide key)" for contact tools and stores config including that key, which implies the agent will collect and need to embed/use secret API keys—posing a direct secret-handling/exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Step 1 “Discover Funding Signals” uses the WebSearch tool and also runs twitter-scraper / reddit-scraper / Hacker News scripts at runtime, which fetch and extract outsider-authored public web/social content (funding announcements) into the agent’s LLM context for consolidation and ranking.