investment-research
Warn
Audited by Snyk on Nov 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The investment-research skill workflow uses
Taskto collect data from web sources and instructs reading external files or URLs when consulting master commentaries, introducing an indirect prompt injection risk from untrusted web or text content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata