sec-amendments-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill uses the Octagon MCP tools (explicitly listing octagon-agent, octagon-web-search-agent and octagon-scraper-agent in SKILL.md and references/mcp-setup.md) to fetch/scrape public financial websites and SEC filings—third-party web content that the agent is expected to read and interpret—exposing it to untrusted external content that could enable indirect prompt injection.