eodhd-apis
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly exposes actions that retrieve open-web third-party content—e.g., "Get Financial News" and "Social Media Sentiment" in the Popular actions/Alternative Data sections and proxy requests through the EODHD APIs via Membrane—so the agent is expected to fetch and interpret untrusted news/social media content that could influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata