rss-feed-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime command rss discover takes a user-supplied --url/--input list and fetches public web pages to extract candidate RSS/Atom links, so outsider-authored free text from those pages is ingested into the LLM context during discovery.