us-stock-analysis

Warn

Audited by Snyk on Feb 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly requires the agent to "Always use web search tools to gather current market data" and to fetch content from public sites (e.g., Yahoo Finance, Seeking Alpha, MarketWatch, SEC filings, TradingView) which the agent must read and use to drive analysis and buy/hold/sell recommendations, so untrusted third-party content can directly influence its actions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 03:18 AM