income-statement
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill invokes the Octagon MCP tools (e.g., octagon-agent and octagon-scraper-agent) to fetch and scrape real-time financial data and aggregate research from public websites/filings (see SKILL.md "Data Source: octagon-financials-agent" and references/mcp-setup.md "Available Tools"), which clearly ingests untrusted third-party web content for the agent to read.
Audit Metadata