daily-news
Warn
Audited by Snyk on Feb 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and ingests arbitrary public third‑party content (RSS feeds via references/methods/rss.py, generic web pages via references/methods/webfetch-smart.md, and social/login‑protected pages via references/methods/browser-smart.md using Browser MCP/X) and then reads/parses those page snapshots into the database for summarization, exposing the agent to untrusted user-generated web content.
Audit Metadata