news-briefing

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub URL appears to point to a plausible official repo (lower risk if it is an established Bitget account), but datahub.noxiaohao.com is an unfamiliar third‑party/personal hosting domain used as a data/endpoint and therefore more likely to be used to deliver untrusted binaries—treat the pair as moderately high risk until the GitHub account and the MCP host/content are independently verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow calls news_feed(...) and social_trending(...) with feeds/platforms like Cointelegraph/CNBC/Weibo/GitHub, which at runtime necessarily ingests outsider-authored free text (news articles, social posts, trending comments) from those external sources into the agent’s LLM context for summarization.