rss-ai-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Fetch-based runtime path: subscription-research rss digest (or check-new) reads RSS/Atom/OPML-derived item text from outsider-authored public web feeds at runtime, which is then ingested into the agent’s LLM context for summarization/ranking (indirect prompt injection risk).