ai-news-daily-v1-0-3
Warn
Audited by Snyk on Mar 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill (src/daily_fetch.py) fetches public RSS feeds and article pages listed in SOURCES (e.g., tech news RSS URLs), saves raw third‑party page content via fetch_article_content, and passes that untrusted content into generate_summary/translator to produce summaries and drive push actions, so external page content can influence the agent's outputs and behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata