Check your security event log for the reason for the challenge…
https://dash.cloudflare.com/?to=/:account/:zone/security/events
If you are on a free plan using bot fight mode, if bot fight mode is the reason, you’ll need to turn it off.
If you are on a paid plan and using Super Bot Fight mode and that is the reason, you can skip it using custom WAF rules for the relevant RSS URL.