hijri-calendar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md includes runtime curl calls to the public Aladhan API (e.g., gToH, hToG, gToHCalendar) whose JSON responses are free-form text from an outsider source and could be ingested into the agent’s LLM context via the workflow’s output.