air-quality-advisor-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill fetches NEA 4-day forecast “forecast” strings from public runtime HTTP JSON endpoints (outsider-authored free text) via fetch_four_day_forecast() → singapore_api.request_json() → _forecast_summary() which copies p.get("forecast") into the LLM-visible output JSON.