daily-digest
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required pipeline fetches public RSS feeds and YouTube content (see scripts/fetch_podcast.py and scripts/fetch_youtube.py) and SKILL.md Step 5 explicitly instructs the agent to read those fetched transcripts/subtitles and produce summaries/cross-analysis, so untrusted, user-generated third‑party content directly influences the agent's outputs and decisions (e.g., what to include/send), enabling indirect prompt injection.
Audit Metadata