thematic-stock-picker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The skill’s runtime workflow requires pulling “screeners used” and “sources block” URLs (e.g., Finviz/Yahoo/TradingView and company/industry pages) and then ingesting their readable text into the agent’s context to produce “screening workings” and “cites sources,” which can include outsider-authored free text from public web pages fetched at runtime.