RSS Reader

• Analyzed: May 12, 2026, 4:32 AM
• Findings: 1
• Version: 1.0.0
• Hash: f498c7eebaff8b5057227a2d7cfa828761cdaa179aa566a557aacae68596f101
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is suspicious due to a significant prompt injection vulnerability. The `SKILL.md` explicitly instructs the AI agent to 'summarize new items worth reading' from RSS feeds, especially when using the `--format ideas` option. The `scripts/rss.js` script fetches content from user-controlled URLs and directly embeds the `item.title` and `item.description` (after basic HTML entity decoding) into the markdown output that the agent is instructed to summarize. This allows an attacker who controls an RSS feed to inject malicious instructions into the agent's prompt, potentially leading to unauthorized actions. While the script itself doesn't contain malicious code, this interaction creates a critical attack surface.