equity-research-analyst

Warn

Audited by Snyk on Apr 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill explicitly requires fetching and using open web content (company IR pages, SEC EDGAR filings, earnings call transcripts, news and industry reports) — see SKILL.md ("Use Web Search ONLY for narrative content") and references/earnings-analysis/workflow.md (Step 1 mandates searching IR sites, SEC EDGAR, and transcripts) — so the agent will ingest untrusted third‑party material that can materially influence analysis and subsequent actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 26, 2026, 05:54 AM
Issues
1