market-top-detector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches S&P 500 breadth data from a public GitHub Pages CSV (https://tradermonty.github.io/market-breadth-analysis/market_breadth_data.csv), which is hosted on a community repository and not an authenticated internal knowledge base.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill fetches S&P 500 breadth data from a public GitHub Pages CSV (https://tradermonty.github.io/market-breadth-analysis/market_breadth_data.csv), which provides behavior-selecting configuration and operational data used directly in the market top scoring logic without an enforced cryptographic signature or immutable identifier.