stock-analyzer
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's runtime script (scripts/analyze.py) uses yfinance.Ticker(...).info and .history to fetch live data from Yahoo Finance (a public third-party website) and directly reads and scores those fields to generate recommendations, so untrusted external content can materially influence its decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata