skills/spacezephyr/myskill/rss-aggregator/Snyk

rss-aggregator

Warn

Audited by Snyk on Aug 9, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The runtime workflow scripts/aggregate.py reads and summarizes entry['summary']/entry['description'] fetched from outsider-authored RSS feed content listed in references/feeds.opml (via feedparser.parse(url)), exposing free text at generation time.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 9, 2026, 08:55 PM

Issues

1

Security Audit — snyk — rss-aggregator