blogwatcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill “blogwatcher” only documents a CLI workflow that scans configured blog/RSS/Atom feeds and does not describe any runtime ingestion of outsider-authored free text beyond first-party user-provided feed URLs/content selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The SKILL contains the install command "go install github.com/Hyaxia/blogwatcher/cmd/blogwatcher@latest", which fetches remote Go module source from that repository and results in building/executing code from an external URL at install/runtime.