us-stock-analysis
Warn
Audited by Snyk on Mar 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly requires the agent to "Always use web search tools to gather current market data" and to fetch content from public sites (e.g., Yahoo Finance, Seeking Alpha, MarketWatch, SEC filings, TradingView) which the agent must read and use to drive analysis and buy/hold/sell recommendations, so untrusted third-party content can directly influence its actions.
Audit Metadata