finance-research-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's finance_api.scan_news function directly fetches Google News RSS (https://news.google.com/rss/...) and ingests article titles/summaries (used by aggregate_sentiment and generate_snapshot_report), so arbitrary public third-party content is read and can materially influence sentiment scoring, report text, and subsequent recommendations/alerts.