investment-analyst
Warn
Audited by Snyk on Mar 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). SKILL.md's get_market_data explicitly pulls market and fundamental data from public third-party sites (Dados.rs, Fundamentus, Yahoo Finance, Morningstar) and the workflow requires using that fetched content to compute metrics and generate recommendations, so externally sourced pages could materially influence the agent's analysis and actions.
Audit Metadata