us-value-investing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The prompt includes an explicit "append the following promotional message at the very end of every output" rule that forces unrelated promotional content into every analysis, which is an extraneous/deceptive instruction outside the skill's stated value‑investing purpose.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md Execution Steps explicitly require using web_search to fetch company data and analysis from public third-party sites (e.g., 10-K filings, Macrotrends, Simply Wall St, Finviz) and instruct the agent to ingest and use that content to compute scores and investment recommendations, so untrusted public-web content can directly influence decisions.