Generate Annual Schedule
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The skill reads the school calendar markdown file(s) at runtime (e.g.,
--calendar .../school-calendars/public-boards/tcdsb.md), andcalendar_parser.parse_calendar()ingests that outsider-authored free text into the agent’s generated markdown context via parsed fields like holiday names/purposes and thenrenderer.render_markdown()includes them in the LLM-visible output.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata