nse-trading-toolkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires pulling live quotes and historical candles from external sources (e.g., "With Groww MCP: Claude pulls live data automatically" and the "yfinance" example) and the Master Workflow step 2 ("Pull live quotes + historical candles + indicators") shows the agent must ingest public third‑party data that will materially influence trading decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically designed for equity trading and references a broker integration (Groww MCP) that explicitly adds "order placement" capabilities. It lists broker-specific tools (symbol search, live quotes, portfolio holdings) tied to a broker MCP and the prereqs mention order placement—i.e., the ability to send market/limit orders through a broker. This is a specific financial execution integration (market orders via a broker), not a generic tool, so it grants direct financial execution authority.