podcast-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill fetches and parses public, third‑party podcast data (via the iTunes Search API at https://itunes.apple.com/lookup and by following RSS feed URLs from feedUrl), and it directly reads/uses episode descriptions and feed entries as part of its workflow, exposing the agent to untrusted user-generated content.