Plan March Break

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Tier 3 "Web search" step explicitly instructs the agent to search the open web for "[school board] March break [year]" and "Download and save any PDF found" and then extract dates from those third-party PDFs, which are untrusted public content that the agent must read and act on as part of its workflow (SKILL.md, "Tier 3
• Web search").