web-search-advanced-financial-report

Warn

Audited by Snyk on Mar 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs agents to call the web_search_advanced_exa tool to fetch and summarize public third-party financial content (e.g., SEC filings and investor pages such as sec.gov and investor.apple.com) as part of its required workflow, so the agent will read and act on untrusted public web content.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 27, 2026, 02:04 AM
Issues
1