news-sentiment
Warn
Audited by Snyk on May 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches recent news from Yahoo Finance (see SKILL.md "Fetch recent news from Yahoo Finance" and scripts/news.py calling trading_skills.news.get_news), so it ingests public third-party articles which are untrusted content and uses them to produce sentiment summaries that can materially influence outputs and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata