peer-comparison

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and parses open/public third-party sources (e.g., https://www.sec.gov/files/company_tickers.json, https://stockanalysis.com/stocks/{ticker}/financials/ratios/, SEC XBRL endpoints and WebSearch / 10‑K content) and uses that untrusted, user-generated/public web content to identify peers and drive metric calculations and recommendations, which could allow indirect prompt injection to influence tool use and decisions.