time-checker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's script scripts/check_time.py explicitly fetches and scrapes live pages from the public third-party site https://time.is/{location} using curl and then parses and returns HTML-derived "details", so it ingests untrusted public web content as part of its workflow.