sec-cash-flow-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill directs the agent to use Octagon MCP tools (e.g., octagon-agent, octagon-web-search-agent, octagon-scraper-agent) to fetch and parse public SEC filings and other financial websites (10‑K/10‑Q via EDGAR and scraped web pages), so the agent ingests open third‑party web content that could carry indirect prompt injections.