reg-feed-watcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via “Direct regulator RSS” pulls from URLs configured in CLAUDE.md (e.g., regulator RSS/HTML pages or any arbitrary RSS URLs the user configured), where the fetched feed items’ titles/abstracts/body text are parsed into LLM-readable prose for Step 1–3 classification/enrichment.