financial-deep-research
Warn
Audited by Snyk on Apr 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill's required Phase 3 RETRIEVE (SKILL.md and reference/methodology.md) explicitly launches parallel WebSearch calls and spawns Task agents to fetch and ingest open web sources (SEC EDGAR, Bloomberg, news sites, Seeking Alpha, arbitrary URLs) which the agent must read and use to drive synthesis and recommendations, exposing it to untrusted third‑party content that can materially influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata