nickel-concentration-risk-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's ingest workflow and scripts (notably scripts/ingest_sources.py and references/data-sources.md) explicitly fetch and parse public third‑party web pages and PDFs (USGS, INSG, company investor sites, news outlets and optional S&P/web scraping), and those external, untrusted sources are read and normalized by the agent as part of its analysis pipeline, exposing it to indirect prompt-injection from open web content.