sports-news
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md workflows explicitly instruct the agent to fetch and read public third-party content via Google News queries and RSS/Atom feeds (e.g., fetch_items --google_news and fetch_feed with URLs like https://feeds.bbci.co.uk/sport/football/rss.xml), so the agent ingests untrusted web content that can influence its outputs and next actions.
Audit Metadata