cmd-rss-feed-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text at runtime when it fetches and parses arbitrary blog HTML/URLs provided by a user (“When given an HTML file or website URL” → fetch_content(url) / parse_html(html_content) / extract_articles(soup)), so an outsider can supply poison HTML into that input.