stock-data

Warn

Audited by Snyk on Mar 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's required analysis workflows (e.g., references/crypto-analyze.md, references/market-overview.md, references/stock-analyze.md and the tools list) explicitly call public third‑party sources such as stock_news/stock_news_global (Sina Finance + NewsNow), stock_news_us, binance_ai_report, okx/binance price endpoints and other news/data tools, so it ingests untrusted public news/AI reports and uses them to drive analysis and recommendations.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 18, 2026, 08:46 AM
Issues
1