finance-sentiment

Warn

Audited by Snyk on Apr 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches sentiment data aggregated from public platforms (Reddit, X.com, news, Polymarket) via the Adanos API (api.adanos.org) and the docs/skill workflow (SKILL.md and references/api_reference.md) state detail endpoints can return "top mentions"/rich fields that the agent reads and synthesizes, so untrusted user-generated content from third-party sources is ingested and used to influence analysis.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 11, 2026, 08:00 PM
Issues
1