portfolio-manager
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (Step 2.2 "Enrich Position Data") instructs the agent to "Use WebSearch or available market data APIs to fetch ... recent news and material developments," which clearly fetches open/public third‑party web content that the agent must read and use to influence analysis and trade/rebalancing recommendations.
Audit Metadata