calculating-crypto-taxes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's architecture and configuration explicitly call out using the CoinGecko historical API (see ARD.md "Historical Price Integration" and config/settings.yaml price_api) and the implementation guide instructs fetching crypto/market data from external providers, so the agent will fetch untrusted public third-party data (historical prices) that directly influences cost-basis calculations and reporting.