aviation-weather

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill directly fetches live METAR/TAF/PIREP data from the public aviationweather.gov API (see wx.py fetch_metar/fetch_taf/fetch_pireps and SKILL.md), and since PIREPs are user-submitted free-text reports that the agent reads and formats as part of its workflow, untrusted third-party content could embed instructions that influence decisions.