occupancy-calculator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md On Startup explicitly tells the agent to have users verify code tables at UpCodes and to "paste the table here" for other US states, and to "ask the user to provide their local occupancy load table or building code reference" for outside the US, meaning the skill ingests untrusted/public third‑party content that would directly change the occupancy calculations and downstream actions.