blogwatcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow for blogwatcher scan necessarily fetches RSS/Atom feed content from user-supplied blog URLs (public web content), and that fetched feed body text is then ingested into the agent/LLM context for processing, creating an indirect prompt-injection surface from outsider-authored feed entries.