opennews
Warn
Audited by Snyk on Mar 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly describes calling the OpenNews API (e.g., POST https://ai.6551.io/open/news_search) to fetch article text from public/untrusted sources (listed under Data Sources such as Twitter/X, Telegram, Weibo and various news sites), and those returned articles, summaries and AI ratings are read and used by the agent to produce signals and responses.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata