earnings-preview
Warn
Audited by Snyk on Apr 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs using yfinance to pull data from Yahoo Finance (e.g., ticker.info, calendar, earnings_estimate, earnings_history, recommendations), which ingests public third-party content that the agent reads and uses to shape its briefing and recommendations.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata