rss-feed

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and parses public RSS feeds (see RSS_SOURCES in rss_fetcher.py and the parse_feed examples in SKILL.md/README.md, e.g., techcrunch.com, wired.com, jiqizhixin.com), ingesting untrusted third-party content which the workflow then uses to generate reports/emails and drive downstream actions.