financial-data-collector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow and code (SKILL.md Step 1 and scripts/collect_data.py) explicitly fetch and parse live public data from yfinance (Yahoo Finance, including ^TNX) and uses those fetched values to produce WACC inputs and financial JSON consumed by downstream modelling, so untrusted public third‑party content is ingested and can materially influence subsequent tool behavior.