freshrss

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs point to APK files hosted in a GitHub repository (direct executables distributed outside official app stores), which is a high-risk distribution method from an unvetted/third-party account and could be used to deliver malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). FreshRSS runtime ingests outsider-authored free text from the FreshRSS account’s RSS feed/article content via cmd_recent/cmd_unread/cmd_feed/cmd_category/cmd_starred/cmd_search calling _stream_query() → _api() to /reader/api/0/stream/contents/..., then formatting item["title"] and (optionally) item["summary"]["content"] into LLM-readable JSON.