sec-10q-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow queries SEC 10-Q financial filings and web/market sources via Octagon MCP, which involves analyzing external financial data and public company reports fetched upon request.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs installation of the Octagon MCP server via Homebrew from raw.githubusercontent.com, which is an external operational script fetch during setup.