financial-health-scores

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses the Octagon MCP server tools to retrieve financial data and company metrics on demand based on user queries, without monitoring an unvetted inbound feed or inbox.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs setting up and running the unofficial third-party Homebrew install script, making it a weak/unknown external operational dependency.