cost-of-capital-estimator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly requires ingesting live public financial data (e.g., "current S&P 500 level", "local government bond yield", "sovereign credit rating from Moody's", "comparable firm betas" as described in SKILL.md and resources/methodology.md) from external public sources and uses those values to drive CAPM, synthetic-rating, and WACC decisions, which exposes the agent to untrusted third‑party content that can materially influence its actions.