efficiency-analysis
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill explicitly fetches and parses public third‑party content (e.g., the SEC EDGAR companyfacts JSON at https://data.sec.gov/api/xbrl/companyfacts/..., financial pages on https://stockanalysis.com/stocks/{ticker}/..., and WebSearch results for employee counts/benchmarks) and then uses that data as an integral part of its analysis, so external, unvetted web content can directly influence tool behavior and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata