weather

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to use web search/web reader (and fallback curl/wget) to fetch and read public web pages (e.g., weather platforms, media pages and other arbitrary sites) as part of its verification workflow, which exposes it to untrusted third-party content from the open web.