blogwatcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md shows the CLI explicitly adds and scans RSS/Atom feeds and blog URLs (e.g., "blogwatcher add ... https://example.com" and "blogwatcher scan"), so the tool ingests untrusted public blog/feed content that the agent will read and present as part of its workflow.