cashflow-chart

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads public financial statements and web pages via Yahoo Finance and Chrome navigation, which constitutes low-risk extraction of publicly accessible web content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references jsDelivr CDN URLs for Chart.js and its plugin, but jsDelivr is a public open-source content delivery network transporter and cannot be classified as a strong first-party publisher of those third-party library packages, making them common unofficial operational dependencies.