Plan Summer Camps

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to accept user‑provided school calendar URLs/PDFs (Tier 2) and to perform web searches and download school calendar PDFs from public sites into the plugin references directory (Tier 3), which the agent then parses to determine school dates that directly drive scheduling and tool actions—i.e., ingesting untrusted third‑party web content that can influence decisions.