financial-analyst-master

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill orchestrates Octagon agents that fetch and scrape open web content—references/mcp-setup.md lists octagon-scraper-agent and the skill docs (e.g., esg-benchmark-comparison.md, various skill Data Source fields and the SKILL.md sourcing hierarchy) explicitly cite press releases, news articles, web search, and third‑party databases that the agent is expected to retrieve and analyze, exposing it to untrusted third‑party content.