caldav-calendar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill uses vdirsyncer to sync CalDAV calendars from third-party providers (e.g., https://caldav.icloud.com/, Google/Nextcloud endpoints) and khal reads/displays event fields (title, description, etc.), so it clearly ingests remote user-generated calendar content as part of its workflow.