risk-assessment

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill declares the yfinance dependency and calls trading_skills.risk.calculate_risk_metrics (invoked by scripts/risk.py), which clearly requires fetching historical price data from public Yahoo Finance (an open third-party website) that the agent reads and uses to compute risk metrics and influence recommendations.