daily-briefing-hub
Warn
Audited by Snyk on Feb 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill explicitly pulls and interprets untrusted public content via "News & Feeds" (uses web_search, RSS feeds, and Hacker News top stories) and allows adding arbitrary RSS URLs, which the agent ingests as part of the briefing workflow and can influence what is surfaced and prioritized.
Audit Metadata