fetch-quotes
Warn
Audited by Snyk on May 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md instructs Claude to run scripts/fetch_quotes.py using yfinance (Yahoo Finance) as the "free" data source, so the agent ingests and parses public third-party content from Yahoo Finance at runtime which can materially influence subsequent analysis and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata