data-routing
Warn
Audited by Snyk on Aug 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required runtime workflow routes analysis/backtest needs to first-party data-provider tools (e.g., SEC EDGAR via
get_sec_filings, Yahoo search client viaget_stock_news, symbol-based OHLCV tools), but the skill itself does not describe ingesting any outsider-authored free text without first selecting a specific provider item tied to user-supplied symbols/needs (no monitored chat/email/inbox/queue/ticket feed path).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata