scaffolding-openai-agents

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's async tool fetch_weather calls a public URL (https://wttr.in/{city}) via httpx and returns response.text for the agent to consume, meaning the agent ingests untrusted third-party web content as part of its workflow.