alterlab-astropy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly describes fetching and using remote, public data (e.g., references/fits.md shows opening remote FITS via s3/HTTP with fits.open(uri, use_fsspec=True), references/coordinates.md uses SkyCoord.from_name which queries online catalogs, and references/wcs_and_other_modules.md exposes download_file(url)), meaning untrusted third‑party content would be ingested and could materially influence subsequent analysis or tool actions.