ics-calendar-reader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill reads and parses remote iCalendar (.ics) files specified in ICS_URLS (loaded from the environment or resolved .env path) by fetching them with urllib.request.urlopen in fetch_ics_url_content and then parsing them with parse_ics_events, so arbitrary public or user-provided calendar content would be ingested and interpreted by the agent.