ticker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md explicitly instructs using ticker-cli to fetch live market data and to "search Yahoo Finance: https://finance.yahoo.com/quote/SYMBOL" when a symbol is unknown, which requires reading content from an open public third-party website that can influence symbol resolution and subsequent actions.