trade-analyze
Warn
Audited by Snyk on May 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill's required workflow (Phase 1 Discovery and each Agent prompt in SKILL.md) explicitly instructs using WebSearch to fetch public news, financial sites and user-generated platforms (e.g., Reddit/WallStreetBets, StockTwits, X/Twitter, public web pages and filings) as part of the DISCOVERY_BRIEF that the agents must read and act on, allowing untrusted third‑party content to influence tool use and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata