balance-sheet-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches financial data from SEC EDGAR XBRL endpoints and stockanalysis.com, which involve parsing third-party web content or API responses, representing a low-risk active fetch of external web data.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to fetch financial and ratio tables from stockanalysis.com, introducing an unofficial third-party operational dependency.