trade-portfolio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for “trade portfolio” first asks the user for holdings, then uses web_search in Phase 1 to fetch current pricing/sector/market data for those tickers, which means outsider-authored (user-provided) free text is used as search inputs and thus can be influenced to affect what the agent ingests.