saas-valuation-compression

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to perform web searches for company funding rounds, valuations, and ARR, which ingests outsider-authored search result snippets.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The README instructs installing the skill via npx skills add himself65/finance-skills --skill saas-valuation-compression, introducing an external repository dependency from an unverified third-party GitHub user/organization (himself65) at runtime/setup.