ics-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Remote outsider-authored free text can be fetched at runtime via load_calendar() using urlopen(source).read() when --source/ICS_SOURCE contains an HTTP(S) URL, and the resulting ICS fields (e.g., SUMMARY, DESCRIPTION, LOCATION) are then converted to strings and included in the LLM-visible output (text/json) through build_occurrence() → matches_contains()/format_event_line()/print_json().