news-feeds

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill explicitly fetches and parses RSS feeds from public third‑party sites (see FEEDS in scripts/news.py and the SKILL.md instructions to "Fetch latest news headlines from major RSS feeds" such as BBC, Reuters, AP, The Guardian, Al Jazeera, NPR, DW), so the agent ingests open web content that could contain external instructions influencing its outputs or subsequent actions.