earnings-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow explicitly performs open-ended web searching and then reads externally sourced earnings materials (press releases, SEC 10-Q/10-K via EDGAR viewer, earnings call transcripts, and investor presentations) as the basis for figures/tables, so outsider-authored free text from those pages can be ingested without first selecting a trusted item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs the agent at runtime to fetch and use external earnings materials (e.g., SEC EDGAR viewer https://www.sec.gov/cgi-bin/viewer?accession=..., investor IR pages like https://investor.company.com/news/q3-2024-earnings, and transcripts such as https://seekingalpha.com/article/...) which will be retrieved and injected into the report content, so these URLs are runtime dependencies that directly control the model's outputs.