supply-chain-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and ingests articles from TheHackerNews (RSS: https://feeds.feedburner.com/TheHackersNews and HTML label pages like https://thehackernews.com/search/label/Supply%20Chain) and directly uses the parsed, untrusted article text to extract package names that drive blocklist updates and upstream-skill rejection decisions, so third-party content can materially influence agent actions.