institutional-flow-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly ingests public third‑party 13F data from Financial Modeling Prep (calls to https://financialmodelingprep.com/api/v3 in scripts/get_institutional_holders) and references SEC EDGAR/WhaleWisdom, and it reads and interprets that external data to produce trading signals and actions, so untrusted external content can materially influence agent decisions.