stock-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill fetches and parses open/public third‑party content — notably Google News RSS (https://news.google.com/rss) in check_breaking_news, plus Yahoo Finance via yfinance, CNN Fear & Greed and SEC EDGAR via edgartools — and the analyze_stock.py workflow explicitly reads and interprets those inputs (breaking_news, sentiment, insider activity) to apply geopolitical/market penalties and modify recommendations, so untrusted external content can materially influence agent behavior.