weather-fetcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs the agent to fetch and parse live JSON weather data from the public wttr.in URL (https://wttr.in/Karachi?format=j1), which is untrusted third-party content the agent must read and whose values can influence subsequent actions.