earnings-capital-allocation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent retrieves and analyzes earnings call transcripts via the Octagon MCP server, which exposes the agent to outsider-authored management commentary and financial content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs installation of the Octagon MCP server via OctagonAI/skills repository and octagon-mcp package, but official first-party provenance for Octagon cannot be independently verified from the provided context, making it an unverified unofficial or unknown operational dependency.