trade-report-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow scans and reads local TRADE-*.md analysis files from the current directory (Step 1-2) and ingests their free-text contents into JSON for PDF generation, so outsider-authored text is directly consumed if an outsider can write those files.