karpathy-rss-daily-briefing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — the skill explicitly WebFetches the public RSS pack at https://youmind.com/rss/pack/andrej-karpathy-curated-rss (Step 1) and then reads each entry's original article links (Step 3), ingesting untrusted third‑party content which is directly used to generate and drive the briefing.