you-finance
Warn
Audited by Snyk on Aug 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow ingests outsider-authored free text only if the user asks for finance research via the external You.com Finance Research API/MCP (which returns untrusted search results), but the skill’s required runtime path described here primarily involves first-party API calls and trusted documentation/MCP configuration rather than automatically consuming user-posted text into a monitored feed.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata