risk-assessment
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill declares the yfinance dependency and calls trading_skills.risk.calculate_risk_metrics (invoked by scripts/risk.py), which clearly requires fetching historical price data from public Yahoo Finance (an open third-party website) that the agent reads and uses to compute risk metrics and influence recommendations.
Audit Metadata