miniflux-news
Warn
Audited by Snyk on May 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests article content from a user-configured Miniflux instance (MINIFLUX_URL) via the API (see SKILL.md and scripts/miniflux.py using GET /v1/entries and /v1/entries/{id} to read entries[].content), and that untrusted third-party feed HTML is read and summarized as part of the workflow, enabling indirect prompt-injection risk.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata