stocktwits-sentiment
Warn
Audited by Snyk on Mar 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to WebFetch StockTwits symbol pages (https://stocktwits.com/symbol/{ticker} and /sentiment) and extract user-generated messages and sentiment labels, which the agent then interprets to compute channel scores and sample messages, allowing untrusted third‑party content to materially influence its outputs.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata