assess-trail-conditions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md procedure (Steps 1–3) explicitly requires ingesting public "recent trip reports (hiking forums, mountain club sites)," "hiking community (forums, apps) GPX tracks," and other public webcams/websites as data sources, which are untrusted, user-generated third‑party content the agent must read and use to make safety decisions—allowing such content to materially influence actions.