rss-reader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required runtime workflow for read fetches and parses XML from a user-supplied feed_url (“any publicly accessible URL”), so the LLM ingests outsider-authored free text from arbitrary third-party RSS/Atom pages/feeds into the agent context via the tool’s extracted title/summary/content fields.